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and which, upon receiving a radio wave through the 
antenna 701 , transmits an analog reception signal 3436 
to the demodulator 3410; an external interface 3413, 
which serves as an interface for the sales mechanism 
3456; and a control logic unit 3407, which activates the 
channel codec 3408, the PLL 3412 and the RF unit 

3411, and which processes interrupt signals that are 
transmitted by the channel codec 3408 and the external 
interface 3413 and serves as an interface when the 
CPU 3400 accesses the channel codec 3408, the PLL 

3412, the RF unit 341 1 or the external interface 3413. 
[1 1 68] The sales mechanism 3456 comprises: a touch 
panel LCD 702; a loudspeaker 3415; a product selec- 
tion switch 704; a sold out display 705; a price calculator 
3416, for calculating the price of a product; a product 
manager 3417. for managing the products in stock; a 
product output mechanism 3418, for outputting a 
selected product to the discharge port 703; a CD-ROM 
drive 3419; and a controller 3414, for controlling the 
operations of the touch panel LCD 702, the loudspeaker 
3415, the sold out display (LED) 705, the price calcula- 
tor 3416. the product manager 3417, the product output 
mechanism 3418. and the CD-ROM drive 3419. 
[1169] The accounting machine 3455 and the sales 
mechanism 3456 communicate with each other via the 
external interface 3413. The accounting machine 3455 
receives an accounting process request from the sales 
mechanism 3456, and performs the payment card set- 
tlement process for a designated amount. The amount 
for the payment card settlement is calculated by the 
price calculator 3416 of the sales mechanism 3456. 
That is, the accounting device 3455 performs only the 
payment card settlement process, and the sales mech- 
anism 3456 performs another process as an automatic 
vending machine. 

[1170] The sales mechanism 3456 has two primary 
operating modes: a purchase mode and a product infor- 
mation mode. The purchase mode is the mode in which 
the purchase of a product by a user takes place, and the 
product information mode is a mode in which informa- 
tion concerning a product is provided to a user before 
(or after) the product has been purchased. 
[1 1 71 ] An operating menu and various information are 
displayed on the touch panel LCD 702 by the controller 
3414. Normally, the operation menu shown in Fig. 7 is 
displayed on the touch panel LCD 702. When a user 
presses "purchase" ("purchase start operation"), the 
sales mechanism 3456 is set to the purchase mode. 
When a user presses "product information," the sales 
mechanism 3456 is set to the product information 
mode. 

[1172] A CD-ROM on which information concerning 
products is stored is loaded into the CD-ROM drive 
3419. When the user presses "product information" on 
the operating menu and the product information mode is 
set, the information stored on the CD-ROM is output to 
the touch panel LCD 702 and through the loudspeaker 
3415. 



[1173] The information concerning products that is 
stored on the CD-ROM is multimedia information includ- 
ing text, images, videos and audio, and may be video 
information consisting of a CF (Commercial Film) of a 
5 product. Especially for a packaged media product, such 
as a video or a music CD (Compact Disty or a game 
software product, sample information for the product is 
stored on the CD-ROM so that the user can try out the 
product in the product information mode. 
10 [1 1 74] When the purchase mode is set by pressing 
"purchase" on the operating menu, the message "Select 
desired product" is displayed on the touch panel LCD 
(display "waiting for product selection operation"), and 
the sales mechanism enters the product selection oper- 
as ation waiting state. When the user depresses the prod- 
uct selection switch, the name, the volume and the total 
amount of the product, and a "payment" button indicat- 
ing the start of the payment operation are displayed on 
the touch panel LCD (display Vaiting for payment start 
20 operation"). At this time, the price calculator 3416 calcu- 
lates the total amount, and the product manager 3417 
verifies the count of the product in stock. This process is 
performed each time the user depresses the product 
selection switch. When the in stock supply of a product 
25 is exhausted, the sold out display (LED) blinks and the 
user can no longer select the pertinent product. 
[1 1 75] When the user depresses the "payment" button 
("payment start operation"), the controller 3414 trans- 
mits, to the accounting machine 3455, an accounting 
so processing request for an amount that corresponds to 
the total amount provided by the price calculator 3416, 
and displays, on the touch panel LCD, a message 
requesting the payment using an electronic payment 
card (display \vaiting for payment operation"). 
35 [1176] When the payment card settlement process 
has been completed by the accounting machine 3455 
and the mobile user terminal 100, the controller 3414 
controls the product output mechanism 3418 so as to 
output a selected product at the discharge port 703. dis- 
40 plays on the touch panel a message indicating the set- 
tlement process has been completed, and a little later, 
displays the operating menu again. At this time, the mul- 
timedia information stored on the CD-ROM may be out- 
put instead of the message indicating that the 
45 settlement has been completed. 

[1177] The accounting machine 3455 performs the 
payment card settlement process that is requested by 
the sales mechanism 3456, and has partially the same 
arrangement as the merchant terminal 103. Adifference 
so from the merchant terminal 103 is that the accounting 
machine 3455 does not include a unit, such as an audio 
codec for performing audio processing, and inputfoutput 
interfaces, such as number key switches, an execution 
switch, a bar code reader and an LCD, and instead, 
55 includes the external interface 341 3 for communicating 
with the sales mechanism 3456. 
[1178] In addition, as a functional difference, the 
accounting machine does not include the credit caid 
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settlement function and the digital wireless telephone 
communication function, which is employed for data 
communications with the service providing system. 
[1 179] The cryptographic processor 3404 includes a 
secret key encryption and decryption function and a 
public key encryption and decryption function. The cryp- 
tographic processor 3404 employs a cryptography 
method determined by the CPU 3400, and the keys to 
encrypt or decrypt data selected by the CPU 3400. The 
encryption and decryption functions of the crypto- 
graphic processor 3404 are employed to perform a dig- 
ital signature process or a closing process for a 
message, and to decrypt a closed and encrypted mes- 
sage or to verify a digital signature accompanying a 
message. 

[1 1 80] The data codec 3405 encodes data to be trans- 
mitted or decodes data that was received, under the 
control of the CPU 3400. In this case, the encoding is a 
process for generating data to be transmitted that 
includes communication control information and error 
correction information, and the decoding is a process 
for performing error correction for the received data and 
for removing extra communication control information in 
order to obtain the data that a sender was to originally 
transmit. The data codec 3405 has a function for encod- 
ing or decoding data during data communication con- 
ducted using a digital wireless telephone, and a function 
for encoding or decoding data during infrared communi- 
cation. The data codec 3405 performs the encoding or 
decoding as determined by the CPU 3400 for data that 
are selected by the CPU 3400. 
[1 181 ] When, for example, a closed message accom- 
panied by a digital signature is to be transmitted via dig- 
ital wireless telephone communication, the CPU 3400 
employs the cryptographic processor 3404 to perform a 
digital signature process and a dosing process for a 
message, employs the data codec 3405 to encode the 
obtained message to provide a data communication 
form that is suitable for a digital wireless telephone, and 
transmits the resultant message through the control 
logic unit 3407 to the channel codec 3408. 
[1182] When a closed message accompanied by a 
digital signature is received via digital wireless tele- 
phone communication, the CPU 3400 reads that mes- 
sage from the channel codec 3408 through the control 
logic unit 3407, employs the data codec 3405 to decode 
the received message, and permits the cryptographic 
processor 3404 to decrypt the closed and encrypted 
message and to verify the digital signature accompany- 
ing the message. 

[1183] Similarly, when a closed message accompa- 
nied by a digital signature is to be transmitted via infra- 
red communication, the CPU 3400 employs the 
cryptographic processor 3404 to provide a digital signa- 
ture for the message and to close the message, and 
employs the data codec 3405 to encode the obtained 
message to provide a data form that is suitable for infra- 
red communication. Then, the resultant message is 



transmitted to the infrared communication module 3406. 
[1184] When a closed message accompanied by a 
digital signature is received via infrared communication, 
the CPU 3400 reads that message from the infrared 
5 communication module 3406, employs the data codec 
3405 to decode the received message, and permits the 
cryptographic processor 3404 to decrypt the closed and 
encrypted message and to verify the digital signature 
accompanying the message. 
10 [1185] The channel codec 3408 adds identification 
data, as header information, to data-communication 
data that are received as a digital signal 3429 from the 
CPU 3400 via the control logic unit 3407, then converts 
the data into a serial digital signal 3433 having a data 
is format that is suitable for a digital wireless telephone, 
and transmits the signal 3433 to the modulator 3409. 
[1 186] In addition, upon receiving a serial digital signal 
3434 from the demodulator 3410, the channel codec 
3408 examines a terminal ID and extracts only such 
20 data as is addressed to the channel codec 3410. 
removes the communication control information for the 
digital wireless telephone, identifies the digital audio 
data and the data-communication data in the header 
information, and transmits the data-communication data 
25 as a digital audio signal 3429 to the audio codec 301 2 
and the control logic unit 3407. 
[1 187] Further, upon receiving a digital wireless call or 
data-communication data, the channel codec 3408 
asserts an interrupt signal 3431. The interrupt signal 
30 3431 is a signal requesting that the CPU 3400 perform 
the process for a digital wireless phone communication 
that has been received and a process for data-commu- 
nication data. 

[1188] In order to perform these processes, as is 
35 shown in Fig. 35A. the channel codec 3408 includes: an 
ID register (ID) 3505, in which is stored a terminal ID; a 
channel codec control register (CHCTL) 3506, which 
controls the operation of the channel codec 3408; a 
data transmission buffer 3507, in which are stored data- 
40 communication data received from the CPU 3400 via 
the control logic unit 3407; and a data reception buffer 
3508, in which are stored data-communication data 
extracted from received data. 

[1 189] A control signal 3432 is a control signal with 
45 which the CPU 3400 directs the channel codec 3408 via 
the control logic unit 3407 in order to write data to the 
data transmission buffer 3507 and to read data from the 
data reception buffer 3508. When the control signal 
3432 goes low, the data-communication data are written 
so to the data transmission buffer 3507. and when the con- 
trol signal 3432 goes high, the data-communication 
data are read from the data reception buffer 3508. 
[1 1 90] The modulator 3409 modulates a serial digital 
signal 3433 received from the channel codec 3408 to 
55 provide an analog transmission signal 3435. which is 
employed as a baseband for an electric signal 3440 that 
is supplied by the PLL 3412, and transmits the signal 
3435 to the RF unit 341 1 . The analog transmission sig- 
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nal 3435 received by the RF unit 3411 is output as a 
radio wave through the antenna 701 . 
[1191] When a radio wave is received at the antenna 
701, an analog reception signal 3436 is transmitted by 
the RF unit 341 1 to the demodulator 3410. The demod- 
ulator 3410 demodulates the analog signal 3436, while 
employing as its baseband an electric signal 3439 that 
is supplied by the PLL 3412, and transmits an obtained 
serial digital signal 3434 to the channel codec 3408. 
[1192] The external interface 3413 is an interface cir- 
cuit for connecting the accounting machine 3455 to the 
sales mechanism 3456. An accounting process request 
is transmitted by the sales mechanism 3456 to the 
accounting machine 3455 during the interrupt process. 
The interrupt process is requested of the CPU 3400 
when the external interface 3413 asserts an interrupt 
signal 3443. 

[1 193] The control logic unit 3407 includes five inter- 
nal registers, as is shown in Fig. 35A: a frame counter 
(FRAMEC) 3500, a start frame register (FRAME) 3501 
a clock counter (CLOCKC) 3502, an update time regis- 
ter (UPTIME) 3503. and an interrupt register (INT) 
3504. 

[1 194] The frame counter 3500 is employed to count 
the number of frames for the digital wireless telephone; 
the start frame register 3501 is employed to store the 
frame number of the frame that is to be activated next; 
the clock counter 3502 is employed to measure the cur- 
rent time; the update time register 3503 is employed to 
store the time at which the automatic vending machine 
104 will communicate with the service providing system 
110 to update data in the RAM 3402 (data updating 
process); and the interrupt register 3504 is employed to 
indicate the type of interrupt that has been generated for 
the CPU 3400. 

[1 1 95] Generally, to receive a call, the digital wireless 
telephone intermittently acquires control data for a con- 
trol channel and compares it with the terminal ID. The 
automatic vending machine 104 employs the frame 
counter 3500 and the start frame register 3501 to inter- 
mittently acquire control data. First, the frame number of 
the frame to be activated next is stored in advance in the 
start frame register 3501. and when the count held by 
the frame counter 3500 equals the count held by the 
start frame register 3501, the control logic unit 3407 
activates the channel codec 3408, the PLL 3412 and 
the RF unit 341 1 to receive control data. 
[1 1 96] When the count held by the clock counter 3502 
matches the count held by the update time register 
3503, or when the interrupt signal 3431 or 3443 is 
asserted, the control logic unit 3407 writes the type of 
and the reason for the interrupt in the interrupt register 
(INT) 3504, and asserts an interrupt signal 3428 
requesting that the CPU 3400 perform an interrupt proc- 
ess. For the interrupt processing, the CPU 3400 reads 
the type of and the reason for the interrupt that are 
stored in the interrupt register (INT) 3504, and then per- 
forms a corresponding process. 



[1 1 97] The individual bit fields of the interrupt register 
(INT) 3504 are defined as is shown in Fig. 35B. 
[1 1 98] Bit 30 represents the digital wireless telephone 
communication state. When the bit value is 0, it indi- 
s cates the state is one where no digital wireless tele- 
phone communication is being performed, and when 
the bit value is 1 , it indicates the state is one where dig- 
ital wireless telephone communication is in progress. 
[1199] Bit 29 represents the generation of a frame 
io interrupt requesting the intermittent acquisition of con- 
trol data. When the bit value is 1 , it indicates a condition 
that exists when a frame interruption has occurred. In 
this bit field, a 1 is set when the count held by the frame 
counter 3500 equals the count held by the start frame 
is register 3501. 

[1 200] Bit 28 represents the generation of a call arrival 
interrupt. When the bit value is 1 , it indicates that a dig- 
ital wireless call has arrived. In this bit field, a 1 is set 
when the terminal ID is matched and the interrupt signal 
20 3432 is asserted during the intermittent acquisition of 
control data for the digital wireless phone. 
[1201] Bit 27 represents the generation of a data 
reception interrupt. When the bit value is 1, it indicates 
that data is being received. In this bit field, a 1 is set 
25 when the data-communication data are received and 
the interrupt signal 3431 is asserted during the course 
of digital wireless telephone communication. 
[1202] Bit 26 represents the generation of an update 
interrupt requesting the performance of a data updating 
so process. When the bit value is 1 , it indicates the gener- 
ation the update interrupt In this bitfield, a 1 is set when 
the count held by the clock counter 3502 matches the 
count held by the update time register 3503. 
[1 203] Bit 25 represents the generation of an external 
35 IF interrupt requesting data communication be initiated 
with the sales mechanism 3456. When the bit value is 1 , 
it signals the generation of the external IF interrupt. In 
this bit field, a 1 is set when the interrupt signal 3443 
received from the external interface 3413 is asserted. 
40 [1204] Data stored in the RAM 3402 will now be 
described. 

[1 205] Fig. 36 is a specific diagram of a RAM map for 
data stored in the RAM 3402. 

[1206] The RAM 3402 is constituted by four areas; a 
45 fundamental program object area 3600. a service data 
area 3601, a work area 3602 and a temporary area 
3603. In the fundamental program object area 3600 are 
stored an upgraded module of a program stored in the 
ROM 3401 , a patch program and an additional program. 
so The work area 3602 is a work area that the CPU 100 
employs when executing a program, and the temporary 
area 3603 is an area in which information received by 
the automatic vending machine is stored temporarily 
[1 207] The service data area 3601 is an area in which 
55 are stored contract information for the electronic com- 
merce service, available payment card information and 
history information, and the data in this area are man- 
aged by the service providing system. The service data 
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area 3601 is constituted by seven sub-areas: a data 
management information area 3504, a merchant infor- 
mation area 3605, a merchant public key certificate 
area 3606, a merchant preference area 3607, an avail- 
able payment card list 3608, a transaction list area 3609 
and an object data area 3610. 
[1 208] The data management information area 3604 
is an area in which is stored management information 
for data stored in the service data area 3601 ; the mer- 
chant information area 3605 is an area in which are 
stored the name of a merchant and information for the 
contents of a contract with a service provider; the mer- 
chant public key certificate area 3606 is an area in 
which a public key certificate for a merchant is stored; 
the merchant preference area 3607 is an area in which 
is stored preference information for a merchant that 
concerns the mobile electronic commerce service; the 
available payment card list area 3608 is an area in 
which is stored list information for those payment cards 
that the merchant can handle; the transaction list area 
3609 is an area in which sales history information for the 
mobile electronic commerce service is stored; and the 
object data area 3610 is an area in which are stored 
object data for the information managed in the other six 
areas. 

[1 209] The information stored in the service data area 
3601 will now be described in detail. 
[1 21 0] Fig. 37 is a detailed, specific diagram showing 
the relationships established for information stored in 
the service data area 3601 . 

[121 1] The data management information 3604 con- 
sists of eight types of information: a last data update 
date 3700, a next data update date 3701 , an accounting 
machine status 3702, a merchant information address 
3703, a merchant public key certificate address 3704, a 
merchant preference address 3705, an available pay- 
ment card list address 3706 and a transaction list 
address 3707. 

[1 21 2] The last data update date 3700 represents the 
date on which the service providing system 110 last 
updated the data in the RAM 3402, and the next data 
update date 3701 represents the date on which the 
service providing system 1 10 will next update the data 
in the service data area 3601. The automatic vending 
machine 104 automatically initiates an update process 
when the time set according to the next data update 
date 3701 is reached. 

[1213] The time of the next data update date 3701 is 
set in the update time register 3503. When the next data 
update date 3701 is reached, the automatic vending 
machine 1 04 initiates the data updating process. During 
the data updating process, the service providing system 
110 updates data stored in the RAM. This process is 
performed daily during a period (e.g.. late at night) in 
which communication traffic is not very heavy. The data 
updating process will be described in detail later. 
[1214] The accounting machine status 3702 repre- 
sents the status of the accounting machine 3455. The 



merchant information address 3703, the merchant pub- 
lic key certificate address 3704, the merchant prefer- 
ence address 3705, the available payment card list 
address 3706 and the transaction list address 3707 
5 respectively represent the first addresses for the areas 
in which are stored the merchant information 3605, the 
merchant public key certificate 3606, the merchant pref- 
erence information 3607, the available payment card list 
3608 and the transaction list 3609. 
w [1 21 5] The available payment card list 3608 includes 
list information for payment cards that can be handled 
by a merchant. 

[1216] In the available payment card list 3608, tor 
each payment card, seven types of information are 
15 entered: a card name 3708, a card code 3709. a pay- 
ment card issuer ID 3710. a validity term 3711, an 
accounting machine private key 3712, a card public key 

3713, and a payment card accounting module address 

3714. The card name 3708 represents the name of a 
20 payment card that the merchant can handle; the card 

code 3709 is code information that represents the type 
of electronic payment card; the payment card issuer ID 
3710 is ID information for a payment card issuer; and 
the validity term 3711 is the period during which the 
25 electronic payment card is valid. The accounting 
machine private key 3712 and the card public key 3713 
are encryption keys that are respectively paired with the 
accounting machine public key 2012 and the card pri- 
vate key 201 1 for the electronic payment card. 
30 [1 21 7] The payment card accounting module address 
371 4 is an address in the object data area 361 0 in which 
is stored a program module (a payment card accounting 
module) for clearing the electronic payment card. 
[1 218] In accordance with the contract entered into by 
35 the merchant and the service providing system, the 
service providing system sets up or updates the con- 
tents of the available payment card list 3608 in the data 
updating process. . 
[1 21 9] In the transaction list 3609, list information is 
40 stored to manage the history information for sales 
through the mobile electronic commerce service. For 
the sales effected through one payment card clearing 
process, in the transaction list 3609 are stored four 
information items: a transaction number 3715. a service 
45 code 3716. a transaction time 3717. and a transaction 
information address 371 8. 

[1220] The transaction number 3715 is a number 
uniquely identifying a transaction performed with a user 
(from the view of the merchant); the service code 3716 
so is code information identifying the type of mobile elec- 
tronic commerce service that was provided for the user; 
and the transaction time 371 7 is time information for the 
time at which a product was sold or the service was pro- 
vided via the mobile electronic service. 
55 [1 221 ] The transaction information address 371 8 is an 
address in the object data area 3610 at which is stored 
a micro-check that describes the contents of the sale 
and a receipt. 
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[1222] The interna! structure of the electronic tele- 
phone card accounting machine 800 will now be 
described. 

[1223] Fig. 38 is a block diagram illustrating the 
arrangement of the electronic telephone card account- s 
ing machine 800. 

[1224] In Fig. 38. the electronic telephone card 
accounting machine 800 comprises: a CPU (Central 
Processing Unit) 3800, which employs a program stored 
in a ROM (Read Only Memory) 3801 to process data for w 
transmission and for reception and to control the other 
components via a bus 3845; a RAM (Random Access 
Memory) 3802 and a hard disk 3803, whereat are 
stored data that have been processed and that are to be 
processed by the CPU 3800; a EEPROM (Electric Eras- is 
able Programmable Read Only Memory) 3804, in which 
is stored an accounting machine ID for the electronic 
telephone card accounting machine 800, a communica- 
tion service provider ID, a private key and a public key 
for the digital signature of a communication service pro- 20 
vider. a service provider ID, and the telephone number 
and the public key of the service providing system 1 10 
(the digital signature of the service provider accompa- 
nies the telephone number of the service providing sys- 
tem); a cryptographic processor 3805, which encrypts 25 
and decrypts data under the control of the CPU 3800; a 
data codec 3806, which encodes data to be transmitted 
and decodes received data under the control of the 
CPU 3800; and an external interface 3807, which 
serves as an interface for the switch 801 . 30 
[1225] The electronic telephone card accounting 
machine 800 and the switch 801 communicate with 
each other via the external interface 3807. The elec- 
tronic telephone card accounting machine 800 receives 
an accounting process request from the switch 801 and 35 
performs the telephone card settlement process for a 
designated value. The value for the telephone card set- 
tlement is designated by the switch 801 . 
[1226] For a communication (micro-check call) using 
the electronic telephone card, upon receiving the 40 
accounting process request from the switch 801 , the 
electronic telephone card accounting machine 800 
exchanges settlement information with the mobile user 
terminal 100 upon the initiation of and during the line 
connection process (communication in process), and 45 
performs the telephone card settlement process. The 
switch 801 switches the lines in accordance with the 
condition of the settlement process performed by the 
electronic telephone card accounting machine 800. 
[1227] Upon the initiation of the line connection proc- so 
ess, and upon each occurrence of the elapse of a con- 
stant period of time, the telephone card settlement 
process is performed for the total communication 
charge assessed for the communication time- 
El 228] First, when the line connection process is 55 
begun, a settlement is made for the communication 
charge V (V > 0) for a constant communication time T (T 
> 0). Then, on each occasion that the communication 



time exceeds T t a settlement process is performed for a 
communication charge 2V for a communication time 2T, 
instead of for a communication charge V. Thereafter, 
whenever the communication time exceeds NT (N is a 
natural number), a settlement process is performed for 
a communication charge (N + 1)V for a communication 
time (N + 1)T, rather than for a communication charge 
NV. 

[1229] When the electronic telephone card accounting 
machine 800 has normally completed the telephone 
card settlement process for the received accounting 
process request, the switch 801 either establishes a 
new line connection, or continues the current line con- 
nection. When, for a specific reason, the telephone card 
settlement is not successful, the switch 801 either 
refrains from establishing a new line connection, or dis- 
connects the line that is currently in use. 
[1230] The cryptographic processor 3805 includes a 
secret key encryption and decryption function and a 
public key encryption and decryption function. The cryp- 
tographic processor 3805 employs a cryptography 
method determined by the CPU 3800 and the keys to 
encrypt or decrypt data selected by the CPU 3800. The 
encryption and decryption functions of the crypto- 
graphic processor 3805 are employed to perform a dig- 
ital signature process or a closing process for a 
message, and to decrypt a closed and encrypted mes- 
sage or to verify a digital signature accompanying a 
message. 

[1 231 ] The data codec 3806 encodes data to be trans- 
mitted or decodes data that is received, under the con- 
trol of the CPU 3800. In this case, the encoding is a 
process for generating data to be transmitted that 
includes communication control information and error 
correction information, and the decoding is a process 
for performing error correction for the received data and 
for removing extra communication control information in 
order to obtain the data that a sender was to originally 
transmit. The data codec 3806 has a function for encod- 
ing or decoding data during data communication con- 
ducted using a digital wireless telephone, and a function 
for encoding or decoding data during infrared communi- 
cation. The data codec 2806 performs encoding or 
decoding determined by the CPU 3800 for data that are 
selected by the CPU 3800. 

[1232] When, for example, a closed message accom- 
panied by a digital signature is to be transmitted to the 
mobile user terminal 100. the CPU 3800 employs the 
cryptographic processor 3805 to perform a digital signa- 
ture process and a closing process for a message, 
employs the data codec 3806 to encode the obtained 
message to provide a data communication form that is 
suitable for digital telephone communication, and trans- 
mits the resultant message through the external inter- 
face 3807 to the switch 801 . 

[1233] When a closed message accompanied by a 
digital signature is received from the mobile user termi- 
nal 100. the CPU 3800 receives that message through 
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the external interface 3807, employs the data codec 

3806 to decode the received message, and permits the 
cryptographic processor 2805 to decrypt the. closed and 
encrypted message and to verify the digital signature 
accompanying the message. 

[1234] Similarly, when a closed message accompa- 
nied by a digital signature is to be transmitted to the 
service providing system 110, the CPU 3800 employs 
the cryptographic processor 3805 to provide a digital 
signature for the message and to close the message, 
and employs the data codec 3806 to encode the 
obtained message and produce a data form suitable for 
digital telephone communication. Then, the resultant 
message is transmitted through the external interface 

3807 to the switch 801. 

[1235] When a closed message accompanied by a 
digital signature is received from the service providing 
system 110, the CPU 3800 receives that message 
through the external interface 3807, employs the data 
codec 3806 to decode the received message, and per- 
mits the cryptographic processor 3805 to decrypt the 
closed and encrypted message and to verify the digital 
signature accompanying the message. 
[1236] Data stored in the RAM 3802 will now be 
described. 

[1 237] Fig. 39 is a specific diagram of a RAM map for 
data stored in the RAM 3802. 

[1238] The RAM 3802 is constituted by four areas: a 
fundamental program object area 3900, a service data 
area 3901. a work area 3902 and a temporary area 
3903. In the fundamental program object area 3900 are 
stored an upgraded module of a program stored in the 
ROM 3801 , a patch program and an additional program. 
The work area 3902 is a work area that the CPU 100 
employs when executing a program, and the temporary 
area 3903 is an area in which information received by 
the electronic telephone accounting machine is stored 
temporarily. 

[1 239] The service data area 3901 is an area in which 
are stored contract information for the electronic com- 
merce service, available telephone card information and 
history information, and the data in this area are man- 
aged by the service providing system. The service data 
area 3901 is constituted by six sub-areas: a data man- 
agement information area 3904, a communication serv- 
ice provider information area 3905, a communication 
service provider's public key certificate area 3906, a 
communication service provider preference area 3907, 
an available telephone card list 3908 and a transaction 
list area 3909. 

[1240] The data management information area 3904 
is an area in which is stored management information 
for data stored in the service data area 3901; the com- 
munication service provider information area 3905 is an 
area in which are stored the name of a communication 
service provider and information for the contents of a 
contract with a service provider; the communication 
service provider public key certificate area 3906 is an 



area in which a public key certificate for a communica- 
tion service provider is stored; the communication serv- 
ice provider preference area 3907 is an area in which is 
stored preference information concerning the mobile 

5 electronic commerce service for a communication serv- 
ice provider; the available telephone card list area 3908 
is an area in which is stored list information for those tel- 
ephone cards the communication service provider can 
handle; and the transaction list area 3909 is an area in 

io which is stored accounting history information for com- 
munication performed (micro-check call) using an elec- 
tronic telephone card. 

[1 241] The information stored in the service data area 
3901 will now be described in detail. 
is [1 242] Fig. 40 is a detailed, specific diagram showing 
the relationships established for information stored in 
the service data area 3901 . 

[1243] The data management information 3904 con- 
sists of eight types of information: a last data update 

20 date 4000, a next data update date 4001 , an accounting 
machine status 4002, a communication service provider 
information address 4003, a communication service 
provider public key certificate address 4004, a commu- 
nication service provider preference address 4005, an 

25 available telephone card list address 4006 and a trans- 
action list address 4007. 

[1244] The last data update date 4000 represents the 
date on which the service providing system 110 last 
updated the data in the RAM 3802 and on the hard disk 

30 3803, and the next data update date 4001 represents 
the date on which the service providing system 110 will 
next update the data in the service data area 3901 . The 
electronic telephone card accounting machine 800 
automatically initiates an update process when the time 

35 set according to the next data update date 4001 is 
reached. 

[1245] The accounting machine status 4002 repre- 
sents the status of the electronic telephone card 
accounting machine 800. The communication service 

40 provider information address 4003, the communication 
service provider public key certificate address 4004, the 
communication service provider preference address 
4005. the available telephone card list address 4006 
and the transaction list address 4007 respectively rep- 

45 resent the first addresses for the areas in which are 
stored the communication service provider information 
3905, the communication service provider public key 
certificate 3906, the communication service provider 
preference information 3907, the available telephone 

so card list 3908 and the transaction list 3909. 

[1 246] The available telephone card list 3908 includes 
list information for telephone cards that can be handled 
by a communication service provider. 
[1247] In the available telephone card list 3908, for 

55 each telephone card, seven types of information are 
entered: a card name 4008, a card code 4009, a tele- 
phone card issuer ID 4010, a validity term 4011, an 
accounting machine private key 4012, a card public key 
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40 1 3, and a telephone card accounting module address 

4014. The card name 4008 represents the name of a 
telephone card that the communication service provider 
can handle; the card code 4009 is code information that 
represents the type of electronic telephone card; the tel- 
ephone card issuer ID 4010 is ID information for a tele- 
phone card issuer; and the validity term 4011 is the 
period during which the electronic telephone card is 
valid. The accounting machine private key 4012 and the 
card public key 4013 are encryption keys that are 
respectively paired with the accounting machine public 
key 2012 and the card private key 2011 for the elec- 
tronic telephone card. 

[1248] The telephone card accounting module 
address 4014 is an address on the hard disk 3803 at 
which is stored a program module (a telephone card 
accounting module) for clearing the electronic tele- 
phone card. 

[1249] In accordance with the contract entered into by 
the communication service provider and the service 
providing system, the service providing system sets up 
or updates the contents of the available telephone card 
list 3908 in the data updating process. 
[1250] In the transaction list 3909, list information is 
stored to manage the history information for sales 
through the mobile electronic commerce service. For 
one communication (micro-check call) employing an 
electronic telephone card, in the transaction list 3909 
are stored four information items: a transaction number 
4015, a service code 4016. a transaction time 4017, 
and a transaction information address 4018. 
[1251] The transaction number 4017 is a number 
uniquely identifying a transaction performed with a user 
(from the view of the communication service provider); 
the service code 4016 is code information identifying 
the type of mobile electronic commerce service (micro- 
check call) that was provided for the user; and the trans- 
action time 401 7 is time information for the time at which 
the telephone card clearing process was performed. 
[1252] The transaction information address 401 8 is an 
address on the hard disk 3803 at which is stored a tele- 
phone micro-check that describes the contents of the 
charge and a receipt. 

[1253] An explanation will now be given for the digital 
signature process and the closing process performed 
by the mobile user terminal 100 when it generates a 
message to be transmitted to the gate terminal 101 , the 
merchant terminal 102, the merchant terminal 103, the 
automatic vending machine 104, the switching center 
1 05, or the service providing system 110. 
[1254] Since the digital signature process and the 
closing process are also performed in the same manner 
by the gate terminal 101, the merchant terminals 102 
and 103, the automatic vending machine 104, the 
switching center 105 and the service providing system < 
110, the identities of the characters in the following 
explanation are generalized by using the titles Mr. A and 
Mr. B, rather than the terms user, merchant and service 



provider. 

[1255] In the digital signature processing, an elec- 
tronic signature is provided for a message, while the 
characteristic of the cryptographic process is employed 
s by using the public key, "a message encrypted using a 
private key is decrypted only by using a public key that 
corresponds to that private key." 
[1256] Figs. 41 A and 41 Bare a flowchart for the digital 
signature processing and a diagram for explaining it 
10 when a message (Message) is accompanied by the dig- 
ital signature of Mr. A. 

[1 257] First, at step 41 00, the CPU performs the hash 
function calculation for a message 4103, and generates 
a message digest 4104. Then, at step 4101, the CPU 

is permits the cryptographic processor to encrypt the mes- 
sage digest 4104 using the private key of Mr. A, and to 
generate a digital signature 4105. At step 4102, the 
CPU adds the digital signature 4105 to the original mes- 
sage 4103. TTirough the above processing, the CPU 

20 generates a message 41 06 accompanied by the digital 
signature of Mr. A. 

[1 258] Reference numeral 41 06 in Fig. 41 B denotes a 
message accompanied by the digital signature of Mr. A. 
Hereinafter, in the drawings, the message accompanied 

25 by the digital signature is shown as indicated by 41 06. 
[1259] The closing processing will now be described. 
In the closing process, the character of the crypto- 
graphic process using the public key, "a message 
encrypted using a private key is decrypted only by using 

30 a public key that corresponds to that private key," is 
employed to allow only a specific person to read the 
contents of the message. 

[1260] Figs. 42A and 42B are a flowchart and a dia- 
gram for explaining the processing performed when 
35 closing a message that is accompanied by the digital 
signature of a Mr. A and when addressing it to a Mr. B, 
who is the recipient. 

[1 261 ] First, at step 4200, the CPU employs a random 
number function to generate a secret key 4204, which is 

40 a secret encryption key. Then, at step 4201, the CPU 
permits the cryptographic processor to encrypt the mes- 
sage 4106, which is accompanied by the digital signa- 
ture, by using the private key 4204. At step 4202, the 
CPU permits the cryptographic processor to encrypt the 

45 secret key 4204 by using the public key of Mr. B, who is 
the recipient. At step 4203, the CPU adds the output 
4206 produced at step 4202 to the output 4205 pro- 
duced at step 4201 . Through the above processing, the 
CPU generates a closed message 4207 that is 

>o addressed to Mr. B. 

[1262] Reference numeral 4207 in Fig. 42B denotes a 
closed message addressed to Mr. B. Hereinafter, in the 
drawings, the closed message is shown as is illustrated 
by 4207. 

>5 [1263] An explanation will now be given for the 
processing performed to decrypt a closed and 
encrypted message, and the processing performed for 
the examination of a digital signature by the mobile user 
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terminal 100, the gate terminal 101, the merchant termi- 
nal 102, the merchant terminal 103, the automatic vend- 
ing machine 104, the switching center 105 or the 
service providing system 110 when the message is 
received from the service providing system. In the fol- 
lowing explanation, characters are also generalized. 
[1264] Figs. 43 A and 43B are a flowchart and a dia- 
gram for explaining the processing performed to decrypt 
a closed message addressed to Mr. B. 
[1 265] First, at step 4300, the CPU separates a closed 
message 4302 addressed to Mr. B into a portion 4303, 
wherein the secret key is encrypted using the public key 
of Mr. B, and a message portion 4304 that is encrypted 
using the secret key. The CPU permits the crypto- 
graphic processor to employ the private key of Mr. B to 
decrypt the portion 4303 wherein the secret key is 
encrypted using the public key of Mr. B, and to extract 
the secret key 4305. Then, at step 4301, the CPU per- 
mits the cryptographic processor to employ the secret 
key 4305 to decrypt the message portion 4304 that is 
encrypted using the secret key. Through the above 
processing, the closed message is decrypted. 
[1266] The digital signature examination process will 
now be described. 

[1267] Figs. 44A and 44B are a flowchart and a dia- 
gram for explaining the processing performed when an 
examination of made of the digital signature of Mr. A, 
the sender, that accompanies a message. First, at step 
4400, the CPU performs a hash function calculation for 
the message portion (Message' 4403) in a message 
4306 accompanied by a digital signature, and gener- 
ates a message digest 4405. Then, at step 4401, the 
CPU permits the cryptographic processor to decrypt, 
using the public key of Mr. A, a digital signature 4404 
accompanying the message 4306. At step 4402. the 
CPU compares the output 4405 at step 4400 with the 
output 4406 at step 4401 . When the contents match, the 
CPU ascertains that the verif ication has been success- 
ful. When the contents do not match, the CPU ascer- 
tains that a verification error has occurred. Through the 
above processing, the digital signature examination 
process is performed. 

[1 268] The processing performed by the service pro- 
viding system 1 10 will now be described, 
[1269] The service providing system 110 communi- 
cates with the mobile user terminal 100, the gate termi- 
nal 101, the merchant terminal 102, the merchant 
terminal 103, the automatic vending machine 104, the 
switching center 105, the transaction processing sys- 
tem 106. the ticket issuing system 107, the payment 
card issuing system 108 and the telephone card issuing 
system 109, and serves as an agent for a user, a mer- 
chant, a communication service provider, a transaction 
processor, a ticket issuer, a payment card issuer and a 
telephone card issuer while providing a mobile elec- 
tronic commerce service for a user, a merchant and a 
communication service provider. 
[1 270] In Fig. 45 is shown the process architecture for 



the service providing system 110. 
[1271] The service providing system 1 10 provides a 
mobile electronic commerce service through the coordi- 
nated performances of eight different processors: a 

5 user processor (UP) 4502, a merchant processor (MP) 
4502, a transaction process processor (TPP) 4504, a 
ticket issuer processor (TIP) 4505, a payment card 
issuer processor (PCIP) 4506, a telephone card issuer 
processor (TCIP) 4507, a service director processor 

10 (SDP) 4501 , and a service manager processor (SMP) 
4500, all of which are generated in the service server 
900. 

[1 272] In Fig. 45, the user processor 4502 has a one- 
to-one correspondence with the mobile user terminal 
is 100, and serves as an interface for communication 
between the service providing system 110 and the 
mobile user terminal 100. 

[1273] The merchant processor 4503 has a one-to- 
one correspondence with the gate terminal 101, the 

20 merchant terminal 102. the merchant terminal 103, the 
automatic vending machine 104 or the switching center 
105, and serves as an interface for communication 
between the service providing system 110 and the gate 
terminal 101, the merchant terminal 102, the merchant 

25 terminal 1 03. the automatic vending machine 1 04 or the 
switching center 105. 

[1 274] The transaction process processor 4504 corre- 
sponds to the transaction processing system 106, and 
serves as an interface for communication between the 
30 service providing system 110 and the transaction 
processing system 106. The ticket issuing processor 
4505 corresponds to the ticket issuing system 107, and 
serves as an interface for communication between the 
service providing system 110 and the ticket issuing sys- 

35 tern 107. The payment card issuing processor 4506 cor- 
responds to the payment card issuing system 108, and 
serves as an interface for communication between the 
service providing system 110 and the payment card 
issuing system 108. The telephone card issuing proces- 

40 sor 4507 corresponds to the telephone card issuing sys- 
tem 109, and serves as an interface for communication 
between the service providing system 1 10 and the tele- 
phone card issuing system 109. 
[1 275] The service director processor 4501 produces 

45 a mobile electronic commerce service by communicat- 
ing with the user processor 4502, the merchant proces- 
sor 4503, the transaction process processor 4504, the 
ticket issuer processor 4505, the payment card issuer 
processor 4506 and the telephone card issuer proces- 

so sor 4507. The service manager processor 4500 man- 
ages the user processor, the merchant processor, the 
transaction process processor, the ticket issuer proces- 
sor, the payment card issuer processor and the tele- 
phone card issuer processor, and the service director 

55 processor in the system providing service 110. The 
meaning of the expression "produces a personal remote 
credit transaction service" will be described in detail 
later. 
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[1 276] The service providing system 1 1 0 may simulta- 
neously communicate with a plurality of mobile user ter- 
minals and a plurality of gate terminals, merchant 
terminals (102 or 103), automatic vending machines 
and switching centers, may simultaneously process a 
plurality of mobile electronic commerce services, or 
may simultaneously communicate with a plurality of 
transaction processing systems, ticket issuing systems, 
payment cared issuing systems or telephone card issu- 
ing systems in order to process a plurality of mobile 
electronic commerce services. Accordingly, in the serv- 
ice server 900 there may be a plurality of user proces- 
sors, merchant processors, transaction process 
processors, ticket issuer processors, payment card 
issuer processors, telephone card issuer processors 
and service director processors. These processors are 
generated or deleted by the service manager processor. 
[1277] When the service server 900 is constituted by 
a plurality of computers, the user processor, the mer- 
chant processor, the transaction process processor, the 
ticket issuer processor, the payment card issuer proces- 
sor, the telephone card issuer processor and the serv- 
ice director processor are separately generated by the 
plurality of computers, so that the load imposed on an 
individual processor can be distributed among the com- 
puters. 

[1 278] A set of cooperative processors for providing a 
single mobile electronic commerce service is deter- 
mined by the service manager processor and is com- 
posed of at least one processor selected from among 
the user, the merchant, the transaction, the ticket issuer, 
the payment card issuer and the telephone card issuer 
processors, plus one service director processor. The 
set of cooperating processes is called a process group. 
[1 279] First, the user process 4502 will be described. 
[1280] The user process 4502 is a process for control- 
ling communication with the mobile user terminal 100, 
for verifying users, for encrypting data to be transmitted 
to the mobile user terminal 100, for decrypting data 
received from the mobile user terminal 100, for examin- 
ing the validity of the data received from the mobile user 
terminal 100, and for preforming a remote access proc- 
ess, a data updating process, a forcible data updating 
process and a data backup process for the mobile user 
terminal 100. 

[1281] The user process 4502 is generated by the per- 
formance of the service manager processor 4500 when 
the service providing system 110 communicates with 
the mobile user terminal 100. In the service manager 
process 4500, one user process 4502 is generated for i 
one mobile user terminal 100 that is communicating 
with the service providing system 1 1 0. 
[1282] In the user process 4502, permission is pro- 
vided only for the accessing of attribute information for 
the owner (the user) of the mobile user terminal 100, t 
which is managed by the user information server 902, 
and data stored in the RAM 1502 of the mobile user ter- 
minal 100. In other words, other information can not be 



accessed during the performance of the user process 
4502. 

[1283] One mobile user terminal 100 corresponds to 
one user process 4502, and the user process 4502 can 
5 effectively engage only its corresponding mobile user 
terminal 100; it can not communicate directly with 
another mobile user terminal. 

[1284] The merchant process 4503 will now be 
described. 

10 [1285] The merchant process is a process for control- 
ling communication with the gate terminal 101, the mer- 
chant terminal 102, the merchant terminal 103, the 
automatic vending machine 104 and the switching 
center 105, for verifying a merchant, for encrypting data 
is to be transmitted to the gate terminal 1 01 . the merchant 
terminal 102, the merchant terminal 103, the automatic 
vending machine 104 and the switching center 105, for 
decrypting data received from the gate terminal 101 , the 
merchant terminal 102, the merchant terminal 103, the 
20 automatic vending machine 104 and the switching 
center 105, for examining the validity of the data 
received from the gate terminal 101, the merchant ter- 
minal 102, the merchant terminal 103, the automatic 
vending machine 104 and the switching center 105, for 
25 preforming a data updating process or a forcible data 
updating process for the gate terminal 101, the mer- 
chant terminal 102, the merchant terminal 103, the 
automatic vending machine 104 and the switching 
center 105, for performing a remote access process for 
30 the gate terminal 101, the merchant terminal 102 and 
the merchant 103, and for performing a data backup 
process for the merchant terminal 103. 
[1286] The merchant process 4503 is generated by 
the performance of the service manager process 4500 
35 when the service providing system 110 communicates 
with the gate terminal 101, the merchant terminal 102, 
the merchant terminal 103, the automatic vending 
machine 104 and the switching center 105. In the serv- 
ice manager process 4500, one merchant process 4503 
40 is generated for a gate terminal 1 01 . a merchant termi- 
nal 102, a merchant terminal 1 03, an automatic vending 
machine 104 or a switching center 105 that communi- 
cates with the service providing system 110. 
[1287] In the merchant process 4503, permission is 
is provided only for the accessing of the attribute informa- 
tion for the merchant and the communication service 
provider, which are managed by the merchant informa- 
tion server 903, and data in the RAM and on the hard 
disk of the gate terminal 101, the merchant terminal 
so 102, the merchant terminal 103, the automatic vending 
machine 104 and the switching center 105. In other 
words, other information can not be accessed during 
the performance of the merchant process 4503. 
[1 288] One gate terminal 1 0 1 , one merchant terminal 
s 1 02, one merchant terminal 103, one automatic vending 
machine 104 or one switching center 105 corresponds 
to one merchant process 4503, and the merchant proc- 
ess 4503 is effective only for a corresponding gate ter- 
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minal 101, merchant terminal 102, merchant terminal 
103, automatic vending machine or switching center 
105; it can not communicate directly with another credit 
gate terminal, merchant terminal (102, 103), automatic 
vending machine or switching terminal. i 
[1289] The transaction processor process 4504 will 
now be described. 

[1 290] The transaction processor process is a process 
for controlling communication with the transaction 
processing system 106, for verifying a transaction proc- 
essor, for encrypting data to be transmitted to the trans- 
action processing system 106. for decrypting data 
received from the transaction processing system 106, 
and for examining the validity of the data received from 
the transaction processing system 106. 
[1291] The transaction processor process 4504 is 
generated by the service manager processor 4500 
when the service providing system 110 communicates 
with the transaction processing system 106. One trans- 
action processor process 4504 is generated to control 
communication across one communication line 
between the service providing system 110 and the 
transaction processing system 106. The digital commu- 
nication line 131 linking the service providing system 
1 10 and the transaction processing system 106 is multi- 
plexed so that it can serve as a plurality of communica- 
tion lines. To perform communication between the 
service providing system 110 and the transaction 
processing system 106 across a plurality of communi- 
cation lines during the same period, the service man- 
ager process 4500 generates multiple transaction 
processor processes 4504 that are equivalent in 
number to the communication lines. 
[1292] In a transaction processor process 4504, per- 
mission is provided only for the accessing of the 
attribute information and transaction history information 
for the transaction processor in an area wherein is 
installed the transaction processing system 106 that is 
managed by the transaction processor information 
server 904. In other words, other information can not be 
accessed during the performance of the transaction 
processor process 4504. 

[1293] The transaction processor process 4504 is 
effective only when employed with a corresponding 
transaction processing system 106, and can not com- 
municate directly with another transaction processing 
system. 

[1294] The ticket issuer process 4505 will now be 
described. 

[1 295] The ticket issuer process is a process for con- 
trolling communication with the ticket issuing system 
107, for verifying a ticket issuer, for encrypting data to 
be transmitted to the ticket issuing system 107, for 
decrypting data received from the ticket issuing system 
107, and for examining the validity of the data received 
from the ticket issuing system 107. 
[1296] The ticket issuer process 4505 is generated by 
the service manager processor 4500 when the service 



providing system 110 communicates with the ticket 
issuing system 107. One ticket issuer process 4505 is 
generated to control communication across one com- 
munication line between the service providing system 

5 1 10 and the ticket issuing system 107. The digital com- 
munication line 132 linking the service providing system 
1 10 and the ticket issuing system 107 is multiplexed so 
that it can serve as a plurality of communication lines. 
To perform communication between the service provid- 

w ing system 110 and the ticket issuing system 107 
across a plurality of communication lines during the 
same period, the service manager process 4500 gener- 
ates multiple ticket issuer processes 4505 that are 
equivalent in number to the communication lines. 

is [1 297] In the ticket issuer process 4505, permission is 
provided only for the accessing of attribute information 
and ticket issuance history information by the ticket 
issuer in the area wherein is installed the ticket issuing 
system 107 that is managed by the ticket issuer infor- 

20 mation server 905. In other words, other information can 
not be accessed during the performance of the ticket 
issuer process 4505. 

[1 298] The ticket issuer process 4505 is effective only 
when employed with a corresponding ticket issuing sys- 
25 tern 1 07, and can not communicate directly with another 
ticket issuing system. 

[1 299] The payment card issuer process 4506 will now 
be described. 

[1300] The payment card issuer process is a process 
30 for controlling communication with the payment card 
issuing system 108. for verifying a payment card issuer, 
for encrypting data to be transmitted to the payment 
card issuing system 108. for decrypting data received 
from the payment card issuing system 108, and for 
35 examining the validity of the data received from the pay- 
ment card issuing system 108. 
[1 301 ] The payment card issuer process 4506 is gen- 
erated by the service manager processor 4500 when 
the service providing system 110 communicates with 
40 the payment card issuing system 108. One payment 
card issuer process 4506 is generated to control com- 
munication across one communication line between the 
service providing system 110 and the payment card 
issuing system 108. The digital communication line 133 
45 linking the service providing system 110 and the pay- 
ment card issuing system 108 is multiplexed so that it 
can serve as a plurality of communication lines. To per- 
form communication between the service providing sys- 
tem 110 and the payment card issuing system 108 
so across a plurality of communication lines during the 
same period, the service manager process 4500 gener- 
ates multiple payment card issuer processes 4506 that 
are equivalent in number to the communication lines. 
[1 302] In the payment card issuer process 4506, per- 
55 mission is provided only for the accessing of the 
attribute information and payment card issuance history 
information by the payment card issuer in the area 
wherein is installed the payment card issuing system 
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108 that is managed by the payment card issuer infor- 
mation server 906. In other words, other information can 
not be accessed during the performance of the payment 
card issuer process 4506. 

[1 303] The payment card issuer process 4506 is effec- s 
tive only when employed with a corresponding payment 
card issuing system 108, and can not communicate 
directly with another payment card issuing system. 
[1304] The telephone card issuer process 4507 will 
now.be described. 10 
[1305] The telephone card issuer process is a process 
for controlling communication with the telephone card 
issuing system 109, for verifying a telephone card 
issuer, for encrypting data to be transmitted to the tele- 
phone card issuing system 109, for decrypting data is 
received from the telephone card issuing system 109, 
and for examining the validity of the data received from 
the telephone card issuing system 109. 
[1306] The telephone card issuer process 4507 is 
generated by the service manager processor 4500 20 
when the service providing system 110 communicates 
with the telephone card issuing system 109. One tele- 
phone card issuer process 4507 is generated to control 
communication across one communication line 
between the service providing system 1 1 0 and the tele- 25 
phone card issuing system 109. The digital communica- 
tion line 134 linking the service providing system 110 
and the telephone card issuing system 109 is multi- 
plexed to serve as a plurality of communication lines. To 
perform communication between the service providing 30 
system 110 and the telephone card issuing system 109 
across a plurality of communication lines during the 
same period, the service manager process 4500 gener- 
ates multiple telephone card issuer processes 4507 that 
are equivalent in number to the communication lines. 35 
[1 307] In the telephone card issuer process 4507, per- 
mission is provided only for the accessing of the 
attribute information and the telephone card issuance 
history information for the telephone card issuer in the 
area wherein is installed the telephone card issuing sys- 40 
tern 109 that is managed by the telephone card issuer 
information server 907. In other words, other informa- 
tion can not be accessed during the performance of the 
telephone card issuer process 4507. The telephone 
card issuer process 4507 is effective only when 45 
employed with a corresponding telephone card issuing 
system 109, and can not communicate directly with 
another telephone card issuing system. 
[1308] The service director process 4501 will now be 
described. 50 
[1309] The service director process is a process for 
communicating with the user process, the merchant 
process and the transaction processor process that 
belong to the same group, and for producing the mobile 
electronic commerce service. The expression "produc- ss 
ing the mobile electronic commerce service" means that 
the service director process cooperates with the other 
member processes in the same process group, and 



takes the initiative in performing the processing for the 
mobile electronic commerce service. 
[1 31 0] The service director processor 450 1 is gener- 
ated by the service manager process 4500 when the 
service providing system 110 performs various proc- 
esses for a mobile electronic commerce service. A 
specified processing sequence is employed for the indi- 
vidual processes for performing the mobile electronic 
commerce service. In accordance with the processing 
sequence, a message received by the performance of a 
member process in the same group is handled, and a 
message requesting a process to be performed is trans- 
mitted to each member process. Upon receiving the 
message via the service director process 4501 , a mem- 
ber process performs a corresponding process. Since 
the service director process cooperates with the other 
member processes in the same group, the processing 
for the electronic mobile commerce service can be per- 
formed. 

[1311] To purchase an electronic ticket, the service 
director process, the user process, the ticket issuer 
process and the transaction processor process are 
assembled into one process group. To purchase an 
electronic payment card, the service director process, 
the user process, the payment card issuer process and 
the transaction processor process are assembled into 
one process group. And to purchase an electronic tele- 
phone card, the service director process, the user proc- 
ess, the telephone card issuer process and the 
transaction processor process are assembled into one 
process group. 

[1312] In the service director process 4501 , permis- 
sion is provided only for the accessing of the information 
that is managed by the service director information 
server 901, and information that a member process in 
the same group is permitted to access. In other words, 
other information can not be accessed during the per- 
formance of the service director process 4501. 
[1 31 3] The service manager process 4500 will now be 
described. 

[1 31 4] The service manager process is a process for 
generating or deleting the user process 4502, the mer- 
chant process 4503, the transaction processor process 
4504, the ticket issuer process 4505, the payment card 
issuer process 4505, the telephone card issuer process 
4505 and the service director process 4501, and for 
generating or deleting a process group. 
[1 31 5] The service manager process 4500 is always 
activated when the service providing system provides 
the mobile electronic commerce service. The genera- 
tion and deletion of the service manager process is con- 
trolled by the management system 407. 
[1 31 6] In the service manager process 4500, permis- 
sion is provided only for the accessing of information 
that is managed by the service director information 
server 901. 

[1317] In other words, other information can not be 
accessed during the performance of the service man- 
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ager process 4500. 

[1 31 8] The information stored in the user information 
server 902 of the service providing system 1 10 will now 
be explained. 

[1 31 9] The user information server 902 manages the 
user attribute information and the data in the RAM 1502 
of the mobile user terminal 100. 
[1320] Rg. 46 is a specific diagram showing informa- 
tion stored for each user in the user information server 
902. 

[1321] The user information server 902 stores 14 
types of information for each user: user data manage- 
ment information 4600, personal information 4601, por- 
trait image data 4602, a user public key certif icate 4603, 
a terminal property 4604, user preference 4605, access 
control information 4606, terminal data 4607, telephony 
information 4608. a credit card list 4609, a ticket list 
4610, a payment card list 4611, a telephone card list 
4612, and a use list 4613. 

[1 322] The user data management information 4600 
is management information for data to be stored for 
each user in the user information server 902. 
[1323] The personal information 4601 is information 
concerning a user, such as the age, the date of birth, the 
occupation, the account number and the terms of a con- 
tract, and one part of this information corresponds to the 
personal information 1706 of the mobile user terminal 
100. 

[1 324] The portrait image data 4602 are data for the 
portrait of a user; the user public key certificate 4603 is 
a certificate for the public key of a user; and the terminal 
property 4604 is attribute information for the mobile user 
terminal 100, such as the model number of the mobile 
user terminal 100, the serial number, the memory 
capacity of a RAM and the version of a stored program. 
[1 325] The user preference 4605 is preference infor- 
mation concerning the mobile electronic commerce 
service, and corresponds to the user preference 1 709 in 
the mobile user terminal 100. 

[1326] The access control information 4606 is infor- 
mation set by the user concerning the access control for 
user information and associated information; the termi- 
nal data 4607 are data in the RAM 1502 in the mobile 
user terminal 100; the telephony information 4608 is 
information concerning a digital wireless telephone, and 
corresponds to the telephony information 1710 of the 
mobile user terminal 100. 

[1 327] The credit card list 4609 is list information for 
credit cards registered by a user; the ticket list 4610 is 
list information for electronic tickets owned by a user; 
the payment card list 4611 is list information for pay- 
ment cards owned by a user; the telephone card list 
4612 is list information for electronic telephone cards 
owned by a user; and the use list 4613 is use history 
information for the mobile electronic commerce service. 
[1328] The user data management information 4600 
consists of 18 types of information: a user name 4614, 
a user ID 4615. a user status 4616, a personal informa- 



tion address 4617, a portrait image data address 4618, 
a user public key certificate address 4619, a terminal 
property address 4620, a user preference address 
4621, an access control information address 4622, a 
5 last update date 4623, a next update date 4624, a termi- 
nal data address 4625, a telephony information address 
4626, a credit card list address 4627, a ticket list 
address 4628, a payment card list address 4629, a tele- 
phone card list address 4630, and a use list address 
4631. 



10 

[1 329] The user status 461 6 indicates the status of the 
mobile user terminal 100. and corresponds to the termi- 
nal status 1802 of the mobile user terminal 100. The last 
update date 4623 provides the last date on which the 
15 data in the service data area 1701 of the mobile user 
terminal 100 were updated; and the next update date 
4624 provides the date on which the data in the service 
data area 1 701 will be updated next. These dates corre- 
spond to the last update date 1800 and the next update 
20 date 1 801 of the mobile user terminal 1 00. 

[1330] The personal information address 4617, the 
portrait image data address 4618, the user public key 
certificate address 4619. the terminal property address 
4620 the user preference address 4621, the access 
25 control information address 4622, the terminal data 
address 4625, the telephony information address 4626. 
the credit card list address 4627, the ticket list address 
4628, the payment card list address 4629, the tele- 
phone card list address 4630, and the use list address 
30 4631 describe addresses in the user information server 
902 at which are respectively stored the personal infor- 
mation 4601. the portrait image data 4602, the user 
public key certificate 4603, the terminal property 4604, 
the user preference 4605, the access control informa- 
35 tion 4605. the terminal data 4607, the telephony infor- 
mation 4608, the credit card list 4609, the ticket list 
461 0, the payment card list 461 1 , the telephone card list 
4612, and the use list 4613. 

[1 331 ] The terminal data 4607 are data stored in the 
40 RAM 1502 of the mobile user terminal 100 when the 
updating process was previously performed, and are 
used for data comparison during the next data updating 
process and are also employed as backup data. 
[1 332] The credit card list 4609, the ticket list 4610, 
45 the payment card list 461 1 , the telephone card list 461 2 
and the use list 4613 correspond to the credit card list 
1711 the ticket list 1712, the payment card list 1713, the 
telephone card list 1714 and the use list 1715 of the 
mobile user terminal 100. An object data address 4623. 
so an electronic ticket address 4648. an electronic pay- 
ment card address 4654, an electronic telephone card 
address 4660 and a user information address 4665 are 
addresses in the user information server 902. 
[1333] The information stored in the merchant infor- 
55 mation server 903 of the service providing system 1 10 
will now be explained. 

[1 334] The merchant information server 903 manages 
attribute information for a merchant or a communication 
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service provider, and data stored in the RAMs and on 
the hard disks of the gate terminal 101 t the merchant 
terminal 102, the merchant terminal 103. the automatic 
vending machine 104 (accounting machine 3455) and 
the switching center 105 (electronic telephone card 
accounting machine 800). 

[1335] Fig. 47 is a specific diagram showing informa- 
tion stored for each merchant in the merchant informa- 
tion server 903. 

[1 336] For each gate terminal 1 0 1 , each merchant ter- 
minal 102, each merchant terminal 103, each automatic 
vending machine 104 (accounting machine 3455) or 
each switching center 105 (electronic telephone card 
accounting machine 800), the merchant information 
server 903 stores 14 types of information: merchant 
data management information 4700, merchant informa- 
tion 4701, a public key certificate 4702, a system prop- 
erty 4703, merchant preference 4704, memory data 
4705, disk data 4706, telephony information 4707, an 
available credit card list 4708, an available payment 
card list 4709, an available telephone card list 4710, a 
ticket list 471 1, a transaction list 4712, and an authori- 
zation report list 4713. 

[1337] The merchant data management information 
4700 is management information for data to be stored in 
the merchant information server 903 for each gate ter- 
minal 101, each merchant terminal 102, each merchant 
terminal 103, each automatic vending machine 104 
(accounting machine 3455) or each switching center 
105 (electronic telephone card accounting machine 
800). 

[1338] The merchant information 4701 is information 
concerning a merchant or a communication service pro- 
vider, such as an address, an account number and the 
terms of a contract, and one part of this information cor- 
responds to the merchant information in the gate termi- 
nal 101, the merchant terminal 102, the merchant 
terminal 103 or the automatic vending machine 104 
(accounting machine 3455), or the communication serv- 
ice provider information 4005 in the switching center 
105 (electronic telephone accounting machine 800). 
[1339] The public key certificate 4702 is a certificate 
for the public key of the merchant or the communication 
service provider; and the system property 4703 is 
attribute information for the gate terminal 101, the mer- 
chant terminal 102, the merchant terminal 103 or the 
automatic vending machine 104 (accounting machine 
3455). or the switching center 105 (electronic telephone 
accounting machine 800), such as a model number, a 
serial number, the memory capacity of a RAM, the 
memory capacity of a hard disk, and the version of a 
stored program. 

[1340] The merchant preference 4704 is preference 
information concerning a merchant or a communication 
service provider for the mobile electronic commerce 
service, and corresponds to the merchant preference in 
the gate terminal 101, the merchant terminal 102, the 
merchant terminal 103 or the automatic vending 



machine 104 (accounting machine 3455), or the com- 
munication service provider information 3906 in the 
switching center 105 (electronic telephone accounting 
machine 800). 

5 [1 341 ] The memory data 4705 are data in the RAM of 
the gate terminal 101, the merchant terminal 102, the 
merchant terminal 103, the automatic vending machine 

104 (accounting machine 3455) or the switching center 

105 (electronic telephone accounting machine 800), or 
10 data on a hard disk in the merchant terminal 102 or the 

switching center 105 (electronic telephone card 
accounting deice 800). 

[1 342] The telephony information 4707 is information 
concerning a digital telephone and a digital wireless tel- 
15 ephone, and corresponds to the telephony information 
2808 of the merchant terminal 102 or the telephony 
information 3208 of the merchant terminal 103. 
[1343] The available credit card list 4708 is list infor- 
mation for those credit cards the merchant can handle; 
20 the available payment card list 4709 is list information 
for those payment cards the merchant can handle; the 
available telephone card list 4710 is list information for 
those telephone cards the merchant can handle; and 
the ticket list 471 1 is list information for those electronic 
25 tickets the merchant sets up as tickets to be examined. 
[1 344] The transaction list 471 2 is history information 
for the mobile electronic commerce service. The author- 
ization report list 4713 is a list of authorizations for the 
electronic payment card, the electronic telephone card 
30 and the electronic ticket. 

[1345] The merchant data management information 
4700 consists of 19 types of information: a merchant 
name (or communication service provider name) 4714, 
a merchant ID (communication service provider ID) 
35 4715, an accounting machine ID (gate ID) 4716. a mer- 
chant status 4717. a merchant information address 
4718, a merchant public key certificate address 4719, a 
system property address 4720. a merchant preference 
address 4721, a last update date 4722, a next update 
40 date 4723. a memory data address 4724, a disk data 
address 4725, a telephony information address 4726, 
an available credit card list address 4727, an available 
payment card address 4728, an available telephone 
card address 4729, a ticket list address 4730, a transac- 
45 tion list address 4731, and an authorization report list 
address 4732. 

[1 346] The merchant status 471 7 indicates the status 
of the gate terminal 101 , the merchant terminal 102, the 
merchant terminal 103, the automatic vending machine 
so 104 (accounting machine 3455) or the switching center 
105 (electronic telephone accounting machine 800), 
and corresponds to the terminal status of the gate termi- 
nal 101 , the merchant terminal 102 or the merchant ter- 
minal 103, or the accounting machine status of the 
55 automatic vending machine 104 (accounting machine 
3455) or the switching center 105 (electronic telephone 
card accounting machine 800). 
[1347] The last update date 4722 provides the last 
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date on which the data in the service data area were 
updated; and the next update date 4723 provides the 
date on which the data in the service data area will be 
updated next. These dates correspond to the last 
update date and the next update date of the gate termi- 5 
nal 101 , the merchant terminal 102, the merchant termi- 
nal 103, the automatic vending machine 104 
(accounting machine 3455) or the switching center 105 
(electronic telephone accounting machine 800). 
[1348] The merchant information address 4718, the 10 
public key certificate address 4719, the system property 
address 4720, the merchant preference address 4721, 
the memory data address 4724, the telephony informa- 
tion address 4726, the available credit card list address 
4727, the available payment card list address 4728, the is 
available telephone card list address 4729, the ticket list 
address 4730, the transaction list address 4731 and the 
authorization report list address 4732 indicate 
addresses in the merchant information server 903 at 
which are stored respectively the merchant information 20 
4701. the public key certificate 4702, the system prop- 
erty 4703, the merchant preference 4704, the memory 
data 4705, the disk data 4706, the telephony informa- 
tion 4707, the credit card list 4708, the payment card list 

4709, the telephone canj list 471 0, the ticket list 471 1 , 25 
the transaction list 4712 and the authorization report list 
4713. 

[1 349] The available credit card list 4708, the available 
payment card list 4709, the available telephone card list 

4710, the ticket list 471 1 , the transaction list 4712 and 30 
the authorization report list 4713 correspond to the 
credit card list, the payment card list, the telephone card 
list 3908, the ticket list 2409, the transaction list and the 
authorization report list of the gate terminal 101, the 
merchant terminal 102, the merchant terminal 103, the 35 
automatic vending machine 104 (accounting machine 
3455) or the switching center 105 (electronic telephone 
accounting machine 800). The service code list 
address, the credit card clearing program address, the 
payment card clearing module address, the telephone 40 
card clearing program address, the ticket examination 
module address, the transaction information address 
and the authorization report address indicate those in 
the merchant information server 903. 
[1 350] The information stored in the transaction proc- 45 
essor information server 904 of the service providing 
system 1 10 will now be explained. 
[1351] The transaction processor information server 
904 manages attribute information for the transaction 
processor and the transaction history information. so 
[1352] Fig. 48 is a specific diagram showing informa- 
tion stored for each transaction processor in the trans- 
action processor information server 904. 
[1353] The transaction processor information server 
904 stores five types of information for each transaction ss 
processor: transaction processor data management 
information 4800, transaction processor information 
4801, a transaction processor public key certificate 



4802, an available credit card list 4803 and a clearing 
list 4804. 

[1 354] The transaction processor data management 
information 4800 is management information for data to 
be stored for each transaction processor in the transac- 
tion processor information server 904. The transaction 
processor information 4801 is information concerning a 
transaction processor, such as an address, an account 
number and the terms of a contract; the transaction 
processor public key certificate 4802 is a certificate for 
the public key of the transaction processor; the available 
credit card list 4803 is list information for credit cards the 
transaction processor can handle; and the clearing list 
4804 is clearing history information for the mobile elec- 
tronic commerce service. 

[1355] The transaction processor data management 
information 4800 consists of seven types of information: 
a transaction processor name 4805, a transaction proc- 
essor ID 4806, a transaction processor status 4807, a 
transaction processor information address 4808, a 
transaction processor public key certificate address 
4809. an available credit card list address 4811 and a 
clearing list address 481 1 . 

[1356] The transaction processor status 4807 pro- 
vides the service status in the settlement process of the 
transaction processing system 106. The transaction 
processor information address 4808, the transaction 
processor public key certificate address 4809, the avail- 
able credit card list address 4810 and the clearing list 
address 481 1 provide the addresses in the transaction 
processor information server 904 at which respectively 
are stored the transaction processor information 4801. 
the transaction processor public key certificate 4802, 
the credit card list 4803 and the clearing list 4804. 
[1 357] In the available credit card list 31 02. two types 
of information are entered for each credit card: a credit 
card name 4812 and a service code list address 4813. 
[1358] The credit card name 4812 represents the 
name of a credit card that the transaction processor can 
handle, and the service code list address 4813 is an 
address of the transaction processor information server 
904 at which is stored a service code list that shows the 
types of services that can be provided by the transac- 
tion processor when the credit card is used. 
[1 359] In the clearing list 4803. four types of informa- 
tion are stored for clearing one credit transaction serv- 
ice: a clearing number 4814, a service code 4815, a 
clearing time 4816, and a clearing information address 
4817. 

[1 360] The clearing number 481 4 uniquely represents 
the credit card clearing process, and the service code 
4815 is a code number that describes the type of credit 
card service that is provided for the user The clearing 
time 4816 is the time at which the credit transaction 
service is cleared, and the clearing information address 
4817 is an address of the transaction processor infor- 
mation server 904 at which is stored a clearing comple- 
tion notification issued by the transaction processing 
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system 106. 

[1 361 ] The information stored in the ticket issuer infor- 
mation server 905 of the service providing system 110 
will now be explained. 

[1362] The ticket issuer information server 905 man- s 
ages the attribute information for the ticket issuer and 
the ticket issuing history information. 
[1363] Fig. 49 is a specific diagram showing informa- 
tion stored in the ticket issuer information server 905 for 
each ticket issuer. 10 
[1 364] The ticket issuer information server 905 stores 
eight types of information for each ticket issuer: ticket 
issuer data management information 4900, ticket issuer 
information 4901, a ticket issuer public key certificate 
4902. a service code list 4903, an installation card list is 
4904, an electronic ticket template list 4905, a transac- 
tion list 4906, and a usage report list 4907. 
[1 365] The ticket issuer data management information 
4900 is management information for data for each ticket 
issuer that is to be stored in the ticket issuer information 20 
server 905; the ticket issuer information 4901 is informa- 
tion concerning a ticket issuer, such as an address, an 
account number and the terms of a contract; the ticket 
issuer public key certificate 4902 is a certificate for the 
public key belonging to a ticket issuer; the service code 25 
list 4903 is a list of service codes indicating the type of 
service provided by a ticket issuer; the installation card 
list 4904 is list information for the installation card num- 
bers of electronic ticket installation cards issued by a 
ticket issuer; the electronic ticket template list 4905 is 30 
management information for a template program for an 
electronic ticket that corresponds to a ticket issued by a 
ticket issuer; the transaction list 4906 is ticket issuing 
history information for a ticket issuer; and the usage 
report list 4907 is management information for a usage 35 
report that the service providing system 110 issued the 
ticket issuing system 107. 

[1 366] The ticket issuer data management information 
4900 consists of ten types of information: a ticket issuer 
processor name 4908, a ticket issuer ID 4909, a ticket 40 
issuer status 4910, a ticket issuer information address 
491 1 , a ticket issuer public key certificate address 4912, 
a service code list address 4913, an installation card list 
address 4914, an electronic ticket template list address 
4915, a transaction list address 4916 and a usage 45 
report list address 4917. 

[1367] The ticket issuer status 4910 specifies the 
service status in the settlement process of the ticket 
issuing system 107. The ticket issuer information 
address 4911, the ticket issuer public key certificate so 
address 4912, the service code list address 4913, the 
installation card list address 4914, the electronic ticket 
template list address 4915, the transaction list address 
491 6 and the usage report list address 491 7 represent 
addresses in the ticket issuer information server 905 at ss 
which respectively are stored the ticket issuer informa- 
tion 4901, the ticket issuer public key certificate 4902, 
the service code list 4903, the installation card list 4904, 



the electronic ticket template list 4905, the transaction 
list 4906 or the usage report list 4907. 
[1368] The electronic ticket template program is a 
model for an electronic ticket issued by the service pro- 
viding system, and is registered in advance in the ticket 
issuer information server 905 in accordance with the 
contract entered into by the ticket issuer and the service 
provider. To issue an electronic ticket, the service pro- 
viding system employs the template program desig- 
nated by the ticket issuing system to generate an 
electronic ticket, and transmits the ticket to the mobile 
user terminal. 

[1369] The electronic template list 4905 includes five 
information items for one type of electronic ticket tem- 
plate program: a template code 4918, a transaction 
module address 4919, a representation module 
address 4920, a default representative component 
address 4921 , and a ticket examination module address 
4922. 

[1370] The template code 4918 is code information 
describing the type of electronic ticket template pro- 
gram. The transaction module address 4919 is an 
address in the ticket issuer information server 905 at 
which is stored a program module that is the transaction 
module 1930 for an electronic ticket that is generated. 
The representation module address 4920 is an address 
in the ticket issuer information server 905 at which is 
stored a program module that is the representation 
module 1931 for an electronic ticket that is generated. 
The default representative component address 4921 is 
an address in the ticket issuer information server 905 at 
which default information is stored. The ticket examina- 
tion module address 4922 is an address in the ticket 
issuer information server 905 at which is stored a ticket 
examination module for examining an electronic ticket 
that is generated. And the ticket examination module is 
a program module that corresponds to the transaction 
module. 

[1 371] The electronic ticket issuing commission 4903, 
which is a message by which the ticket issuing system 
requests that the service providing system request the 
issuance of an electronic ticket, includes not only ticket 
information, such as the date of an event and a seat 
number, but also a template code that specifies a tem- 
plate program and representative component informa- 
tion. The service providing system generates an 
electronic ticket using the transaction module and the 
representation module specified by the template code, 
and the representative component information that is 
included in the electronic ticket issuing commission. 
[1372] Before the template program is registered in 
the ticket issuer information server 905, the operation 
and the safety of the mobile electronic commerce sys- 
tem are confirmed. Since several template programs 
are stored in advance, the ticket issuer can safely issue 
a ticket that performs various operations, as well as tick- 
ets of various designs. The procedures for issuing an 
electronic ticket will be described in detail later. 



113 



225 



EP 0 950 968 A1 



226 



[1 373] The transaction list 4906 includes four types of 
information for one ticket order or one ticket purchase: a 
transaction number 4923, a service code 4924, a trans- 
action time 4925, and a transaction information address 
4926. 

[1 374] The transaction number 4923 uniquely repre- 
sents the ticket order process and the ticket purchase 
process; the service code 4924 represents the type of 
service provided by the ticket issuing system; the trans- 
action time 4925 represents the time at which the ticket 
order process or the ticket purchase process was per- 
formed; and the transaction information address 4926 is 
an address in the ticket issuer information server 905 at 
which is stored a ticket order response or a receipt that 
was issued by the ticket issuing system 107. 
[1375] The usage report list 4907 is management 
information for the usage report 7100 that the service 
providing system 1 10 issued to the ticket issuing system 
107, and comprises a list of the usage report addresses 
4927 that are located in the ticket issuer information 
server 905 in which the usage reports are stored. 
[1376] The information stored in the payment card 
information server 905 of the service providing system 
110 will now be explained. 

[1377] The transaction processor information server 
904 manages attribute information for the transaction 
processor and the transaction history information. 
[1378] The information stored in the payment card 
issuer information server 906 of the service providing 
system 110 will now be explained. 
[1379] The payment card issuer information server 
906 manages the attribute information for the payment 
card issuer and the payment card issuing history infor- 
mation. 

[1380] Fig. 50 is a specific diagram showing informa- 
tion stored in the payment card issuer information 
server 906 for each payment card issuer. 
[1381] The payment card issuer information server 
906 stores eight types of information for each payment 
card issuer: payment card issuer data management 
information 5000, payment card issuer information 
5001 , a payment card issuer public key certificate 5002, 
a service code list 5003. an installation card list 5004, 
an electronic payment card template list 5005, a trans- 
action list 5006. and a usage report list 5007. 
[1382] The payment card issuer data management 
information 5000 is management information for data 
for each payment card issuer that is to be stored in the 
payment card issuer information server 906; the pay- 
ment card issuer information 5001 is information con- 
cerning a payment card issuer, such as an address, an 
account number and the terms of a contract; the pay- 
ment card issuer public key certificate 5002 is a certifi- 
cate for the public key belonging to a payment card 
issuer; the service code list 5003 is a list of service 
codes indicating the type of service provided by a pay- 
ment card issuer; the installation card list 5004 is list 
information for the installation card numbers of elec- 



tronic payment card installation cards issued by a pay- 
ment card issuer; the electronic payment card template 
list 5005 is management information for a template pro- 
gram for an electronic payment card that corresponds to 
5 a payment card issued by a payment card issuer; the 
transaction list 5006 is payment card issuing history 
information for a payment card issuer; and the usage 
report list 5007 is management information for a usage 
report that the service providing system 1 10 issued the 
10 payment card issuing system 108. 

[1383] The payment card issuer data management 
information 5000 consists of ten types of information: a 
payment card issuer processor name 5008, a payment 
card issuer ID 5009, a payment card issuer status 5010, 
15 a payment card issuer information address 501 1 . a pay- 
ment card issuer public key certificate address 5012, a 
service code list address 5013, an installation card list 
address 5014, an electronic payment card template list 
address 5015. a transaction list address 5016 and a 
20 usage report list address 501 7. 

[1 384] The payment card issuer status 501 0 specifies 
the service status in the issuance process of the pay- 
ment card issuing system 1 08. The payment card issuer 
information address 501 1 , the payment card issuer pub- 
25 lie key certificate address 5012, the service code list 
address 5013. the installation card list address 5014, 
the electronic payment card template list address 5015, 
the transaction list address 5016 and the usage report 
list address 5017 represent addresses in the payment 
30 card issuer information server 906 at which respectively 
are stored the payment card issuer information 5001, 
the payment card issuer public key certificate 5002, the 
service code list 5003, the installation card list 5004, the 
electronic payment card template list 5005, the transac- 
35 tion list 5006 or the usage report list 5007. 

[1 385] The electronic payment card template program 
is a model for an electronic payment card issued by the 
service providing system, and is registered in advance 
in the payment card issuer information server 906 in 
40 accordance with the contract entered into by the pay- 
ment card issuer and the service provider. To issue an 
electronic payment card, the service providing system 
employs the template program designated by the pay- 
ment card issuing system to generate an electronic pay- 
45 ment card, and transmits the payment card to the 
mobile user terminal. 

[1386] The electronic template list 5005 includes f ive 
information items for one type of electronic payment 
card template program: a template code 5018, a trans- 
so action module address 5019. a representation module 
address 5020, a default representative component 
address 5021, and a payment card clearing module 
address 5022. 

[1387] The template code 5018 is code information 
55 describing the type of electronic payment card template 
program. The transaction module address 5019 is an 
address in the payment card issuer information server 
906 at which is stored a program module that is the 
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transaction module 2030 for an electronic payment card 
that is generated. The representation module address 
5020 is an address in the payment card issuer informa- 
tion server 906 at which is stored a program module that 
is the representation module 2031 for an electronic pay- 5 
ment card that is generated. The default representative 
component address 5021 is an address in the payment 
card issuer information server 906 at which default infor- 
mation is stored. The payment card clearing module 
address 5022 is an address in the payment card issuer 10 
information server 906 at which is stored a payment 
card clearing module for clearing an electronic payment 
card that is generated. And the payment card clearing 
module is a program module that corresponds to the 
transaction module. 

la 

[1388] The electronic payment card issuing commis- 
sion 6203, which is a message by which the payment 
card issuing system requests that the service providing 
system request the issuance of an electronic payment 
card, includes not only payment card information, such 20 
as the face value of the payment card that is issued and 
the usage condition, but also a template code that spec- 
ifies a template program and representative component 
information. The service providing system generates an 
electronic payment card using the transaction module 25 
and the representation module specified by the tem- 
plate code, and the representative component informa- 
tion that is included in the electronic payment card 
issuing commission. 

[1389] Before the template program is registered in 30 
the payment card issuer information server 906, the 
operation and the safety of the mobile electronic com- 
merce system are confirmed. Since several template 
programs are stored in advance, the payment card 
issuer can safely issue a payment card that performs 35 
various operations, as well as payment cards of various 
designs. The procedures for issuing an electronic pay- 
ment card will be described in detail later. 
[1 390] The transaction list 5006 includes four types of 
information for one payment card issuance: a transac- 40 
tion number 5023, a service code 5024, a transaction 
time 5025, and a transaction information address 5026. 
[1391] The transaction number 5023 uniquely repre- 
sents the payment card issuance process; the service 
code 5024 represents the type of service provided by 4s 
the payment card issuing system; the transaction time 
5025 represents the time at which the payment card 
issuance process was performed; and the transaction 
information address 5026 is an address in the payment 
card issuer information server 906 at which is stored a so 
receipt that was issued by the payment card issuing 
system 108. 

[1392] The usage report list 5007 is management 
information for the usage report that the service provid- 
ing system 1 1 0 issued to the payment card issuing sys- ss 
tern 108, and comprises a list of the usage report 
addresses 5027 that are located in the payment card 
issuer information server 906 in which the usage 



reports 5704 are stored. 

[1393] The information stored in the telephone card 
issuer information server 907 of the service providing 
system 1 10 will now be explained. 
[1394] The telephone card issuer information server 
907 manages the attribute information for the telephone 
card issuer and the telephone card issuing history infor- 
mation. Fig. 51 is a specific diagram showing informa- 
tion stored in the telephone card issuer information 
server 907 for each telephone card issuer. 
[1395] The telephone card issuer information server 
907 stores eight types of information for each telephone 
card issuer: telephone card issuer data management 
information 5100, telephone card issuer information 

5101, a telephone card issuer public key certificate 

5102, a service code list 5103. an installation card list 
5104, an electronic telephone card template list 5105, a 
transaction list 5106, and a usage report list 5107. 
[1396] The telephone card issuer data management 
information 5100 is management information for data 
for each telephone card issuer that is to be stored in the 
telephone card issuer information server 907; the tele- 
phone card issuer information 5101 is information con- 
cerning a telephone card issuer, such as an address, an 
account number and the terms of a contract; the pay- 
ment card issuer public key certificate 5102 is a certifi- 
cate for the public key belonging to a telephone card 
issuer; the service code list 5103 is a list of service 
codes indicating the type of service provided by a tele- 
phone card issuer; the installation card list 5104 is list 
information for the installation card numbers of elec- 
tronic telephone card installation cards issued by a tele- 
phone card issuer; the electronic telephone card 
template list 51 05 is management information for a tem- 
plate program for an electronic telephone card that cor- 
responds to a telephone card issued by a telephone 
card issuer; the transaction list 5106 is telephone card 
issuing history information for a telephone card issuer; 
and the usage report list 5107 is management informa- 
tion for a usage report that the service providing system 

1 10 issued the telephone card issuing system 109. 
[1397] The telephone card issuer data management 
information 5100 consists of ten types of information: a 
telephone card issuer processor name 5108, a tele- 
phone card issuer ID 5109, a telephone card issuer sta- 
tus 5110, a telephone card issuer information address 
5111, a telephone card issuer public key certificate 
address 5112, a service code list address 5113, an 
installation card list address 5114, an electronic tele- 
phone card template list address 5115. a transaction list 
address 51 16 and a usage report list address 51 1 7. 
[1398] The telephone card issuer status 51 10 speci- 
fies the service status in the issuance process of the tel- 
ephone card issuing system 107. The telephone card 
issuer information address 5111. the telephone card 
issuer public key certificate address 5112, the service 
code list address 51 13, the installation card list address 
5114. the electronic telephone card template list 
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address 51 1 5, the transaction list address 51 1 6 and the 
usage report list address 5117 represent addresses in 
the telephone card issuer information server 907 at 
which respectively are stored the telephone card issuer 
information 5101, the telephone card issuer public key 
certif icate 5102, the service code list 5103, the installa- 
tion card list 5104, the electronic telephone card tem- 
plate list 5105, the transaction list 5106 or the usage 
report list 5107. 

[1399] The electronic telephone card template pro- 
gram is a model for an electronic telephone card issued 
by the service providing system, and is registered in 
advance in the telephone card issuer information server 
907 in accordance with the contract entered into by the 
telephone card issuer and the service provider. To issue 
an electronic telephone card, the service providing sys- 
tem employs the template program designated by the 
telephone card issuing system to generate an electronic 
telephone card, and transmits the telephone card to the 
mobile user terminal. 

[1 400] The electronic template list 51 05 includes five 
information items for one type of electronic telephone 
card template program: a template code 51 18, a trans- 
action module address 5119, a representation module 
address 5120, a default representative component 
address 5121, and a telephone card clearing module 
address 5122. 

[1401] The template code 5118 is code information 
describing the type of electronic telephone card tem- 
plate program. The transaction module address 51 19 is 
an address in the telephone card issuer information 
server 907 at which is stored a program module that is 
the transaction module 2030 for an electronic telephone 
card that is generated. The representation module 
address 51 20 is an address in the telephone card issuer 
information server 907 at which is stored a program 
module that is the representation module 2031 for an 
electronic telephone card that is generated. The default 
representative component address 5121 is an address 
in the telephone card issuer information server 907 at 
which default information is stored. The telephone card 
clearing module address 5122 is an address in the tele- 
phone card issuer information server 907 at which is 
stored a telephone card clearing module for clearing an 
electronic telephone card that is generated. And the tel- 
ephone card clearing module is a program module that 
corresponds to the transaction module. 
[1 402] The electronic telephone card issuing commis- 
sion 6203, which is a message by which the telephone 
card issuing system requests that the service providing 
system request the issuance of an electronic telephone 
card, includes not only telephone card information, such 
as the face value of the telephone card that is issued 
and the usage condition, but also a template code that 
specifies a template program and representative com- 
ponent information. The service providing system gen- 
erates an electronic telephone card using the 
transaction module and the representation module 



specified by the template code, and the representative 
component information that is included in the electronic 
telephone card issuing commission. 
[1403] Before the template program is registered in 
5 the telephone card issuer information server 907, the 
operation and the safety of the mobile electronic com- 
merce system are confirmed. Since several template 
programs are stored in advance, the telephone card 
issuer can safely issue a telephone card that performs 
10 various operations, as well as telephone cards of vari- 
ous designs. The procedures for issuing an electronic 
telephone card will be described in detail later. 
[1404] The transaction list 5106 includes four types of 
information for one telephone card issuance: a transac- 
ts tion number 5123, a service code 5124, a transaction 
time 5125, and a transaction information address 5126. 
[1405] The transaction number 5123 uniquely repre- 
sents the telephone card issuance process; the service 
code 5124 represents the type of service provided by 
20 the telephone card issuing system; the transaction time 
5125 represents the time at which the telephone card 
issuance process was performed; and the transaction 
information address 5126 is an address in the tele- 
phone card issuer information server 907 at which is 
25 stored a receipt that was issued by the telephone card 
issuing system 109. 

[1406] The usage report list 5107 is management 
information for the usage report that the service provid- 
ing system 110 issued to the telephone card issuing 
30 system 109, and comprises a list of the usage report 
addresses 5127 that are located in the telephone card 
issuer information server 907 in which the usage 
reports 5704 are stored. 

[1407] The information stored in the service director 
35 information server 901 in the service providing system 
110 will now be explained. 

[1408] The service director information server 901 
stores ten types of information: a user list 5200, a mer- 
chant list 5201, a transaction processors list 5202, a 
40 ticket issuers list 5203, a payment card issuers list 5204, 
a telephone card issuers list 5205, a provided service 
list 5206, electronic ticket management information 
5300, electronic payment card management informa- 
tion 5400, and electronic telephone card management 
45 information 5500. 

[1409] Figs. 52A to 52G are specific diagrams show- 
ing the user list 5200, the merchant list 5201 , the trans- 
action processors list 5202, the ticket issuers list 5203, 
the payment card issuers list 5204, the telephone card 
so issuers list 5205 and the provided service list 5206. all 
of which are in the service director information server 
901. Figs. 53 to 55 are specific diagrams respectively 
showing the electronic ticket management information 
5300 stored for one type of electronic ticket, the etec- 
55 tronic payment card management information 5400 
stored for one type of electronic payment card, and the 
electronic telephone card management information 
5500 stored for one type of electronic telephone card. 
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[141 0] The user list 5200 is a list of attribute informa- 
tion for the mobile user terminals that have entered into 
contracts with a service provider; the merchant list 5201 
is a list of attribution information for the gate terminals, 
the merchant terminals (102 or 103), the automatic 
vending machines (accounting machines) and the 
switching centers (electronic telephone card accounting 
machines) that have entered into contracts with the 
service provider; the transaction processors list 5202 is 
a list of the attribution information for all the transaction 
processors that have entered into contracts with the 
service provider; the ticket issuers list 5203 is a list of 
attribution information for all the ticket issuers who have 
entered into contracts with the service provider; the pay- 
ment card issuers list 5204 is a list of attribution informa- 
tion for all the payment card issuers who have entered 
into contracts with the service provider; the telephone 
card issuers list 5205 is a list of attribution information 
for all the telephone card issuers who have entered into 
contracts with the service provider; the provided service 
list 5203 is a list of information for mobile electronic 
commerce service that has been provided by the serv- 
ice providing system 1 10; the electronic ticket manage- 
ment information 5300 is management information for a 
registered electronic ticket; the electronic payment card 
management information 5400 is management informa- 
tion for a registered electronic payment card; and the 
electronic telephone card management information 
5500 is management information for a registered elec- 
tronic telephone card. 

[1411] In the user list 5200, six types of information 
are stored for each mobile user terminal: a user name 
5207, a user ID 5208, a user telephone number 5209, a 
user public key certificate address 5210, an available 
service list address 5211, and a user information 
address 5212. 

[1412] The user public key certificate address 5210 is 
an address at which a certificate for the public key of a 
user is stored; the available service list address 521 1 is 
an address at which a list of service codes that the user 
can employ is stored; and the user information address 
5212 is an address at which the user data management 
information 4600 for the pertinent user is stored. 
[141 3] In the merchant list 5201 , seven types of infor- 
mation are stored for each gate terminal, each mer- 
chant terminal (102, 103), each automatic vending 
machine (accounting machine) or each switching center 
(electronic telephone card accounting machine): a mer- 
chant name (communication service provider name) 
5213, a merchant ID (communication service provider i 
ID) 5214, an accounting machine ID (gate ID) 5215, a 
merchant telephone number 5216, an available service 
list address 521 7, a customers table address 521 8, and 
a merchant information address 5219. 
[1414] The available service list address 521 7 is an i 
address at which is stored a list of the service codes 
that the merchant or the service communication pro- 
vider can handle. The customers table address 5218 is 



the address at which is stored table information (a cus- 
tomer table) that represents the correspondence cred- 
ited to the customer number and the user ID. And the 
merchant information address 5219 is an address at 
5 which the merchant data management information 4700 
for the pertinent merchant is stored. 
[1415] In the transaction processors list 5202 five 
types of information are stored for each transaction 
processor: a transaction processor name 5220, a trans- 
10 action processor ID 5221 , a transaction processor com- 
munication ID 5222, an available service list address 
5223, and a transaction processor information address 
5224. 

[1416] The transaction processor communication ID 
15 5222 is an ID for the transaction processing system 106 
used when the service providing system 110 communi- 
cates with the transaction processing system 106 via 
the digital communication line 131. The available serv- 
ice list address 5223 is an address at which is stored a 
20 list of service codes that the transaction processor can 
handle. And the transaction processor information 
address 5224 is an address in the transaction processor 
information server 904 at which is stored the transaction 
processor data management information 4800 for the 
25 pertinent transaction processor. 

[1417] In the ticket issuers list 5203 seven types of 
information are stored for each ticket issuer: a ticket 
issuer name 5225, a ticket issuer ID 5226, a ticket 
issuer communication ID 5227, an available service list 
30 address 5228, an installation card list address 5229, a 
customers table address 5230, and a ticket issuer infor- 
mation address 5231. 

[1418] The ticket issuer communication ID 5227 is an 
ID for the ticket issuing system 107 used when the serv- 
35 ice providing system 110 communicates with the ticket 
issuing system 107 via the digital communication line 
132. The available service list address 5228 is an 
address at which is stored a list of service codes that 
the ticket issuer can handle. The installation card list 
40 address 5229 is an address in the service director infor- 
mation server 901 at which is stored a list of installation 
card numbers for electronic ticket installation cards that 
are issued by the ticket issuer. The customer table 
address 5230 is an address in the service director infor- 
ms mation server 90 1 at which is stored table information (a 
customer table) that represents the correspondence 
credited to the customer number and the user ID. And 
the ticket issuer information address 5231 is an address 
in the ticket issuer information server 905 at which is 
50 stored the ticket issuer data management information 
4900 for the pertinent ticket issuer. 
[1419] In the payment card issuers list 5204 seven 
types of information are stored for each payment card 
issuer: a payment card issuer name 5232, a payment 
~>s card issuer ID 5233, a payment card issuer communica- 
tion ID 5234, an available service list address 5235, an 
installation card list address 5236, a customers table 
address 5237, and a payment card issuer information 
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address 5238. 

[1420] The payment card issuer communication ID 
5234 is an ID for the payment card issuing system 108 
used when the service providing system 1 10 communi- 
cates with the payment card issuing system 108 via the 
digital communication line 133. The available service list 
address 5235 is an address at which is stored a list of 
service codes that the payment card issuer can handle. 
The installation card list address 5236 is an address in 
the service director information server 901 at which is 
stored a list of installation card numbers for electronic 
payment card installation cards that are issued by the 
payment card issuer. The customer table address 5237 
is an address in the service director information server 
901 at which is stored table information (customer table) 
that represents the correspondence credited to the cus- 
tomer number and the user ID. And the payment card 
issuer information address 5238 is an address in the 
payment card issuer information server 906 at which is 
stored the payment card issuer data management infor- 
mation 5000 for the pertinent payment card issuer. 
[1421] In the telephone card issuers list 5205 seven 
types of information are stored for each telephone card 
issuer: a telephone card issuer name 5239, a telephone 
card issuer ID 5240. a telephone card issuer communi- 
cation ID 5241 , an available service list address 5242, 
an installation card list address 5243, a customers table 
address 5244, and a telephone card issuer information 
address 5245. 

[1422] The telephone card issuer communication ID 
5241 is an ID for the telephone card issuing system 109 
used when the service providing system 110 communi- 
cates with the telephone card issuing system 109 via 
the digital communication line 134. The available serv- 
ice list address 5242 is an address at which is stored a 
list of service codes that the telephone card issuer can 
handle. The installation card list address 5243 is an 
address in the service director information server 901 at 
which is stored a list of installation card numbers for 
electronic telephone card installation cards that are 
issued by the telephone card issuer. The customer table 
address 5244 is an address in the service director infor- 
mation server 901 at which is stored table information (a 
customer table) that represents the correspondence 
credited to the customer number and the user ID. And 
the telephone card issuer information address 5246 is 
an address in the telephone card issuer information 
server 907 at which is stored the telephone card issuer 
data management information 5100 for the pertinent tel- 
ephone card issuer. 

[1423] In the provided service list 5206 four types of 
information are stored for each occasion on which the 
mobile electronic commerce service was provided: a 
service providing number 5246, a service code 5247, a 
service providing time 5248, and a provided service 
information address 5249. 

[1424] The service providing number 5246 uniquely 
represents the process performed by the service provid- 



ing system 1 10 on an occasion when service was pro- 
vided. The service code 5247 is code information 
indicating the type of service provided. The service pro- 
viding time 5248 is the time at which the mobile elec- 
5 tronic commerce service was provided. And the 
provided service information address 5249 is an 
address in the service director information server 901 at 
which is stored history information for the processes 
performed by the service providing system 110 on an 
10 occasion when service was provided. 

[1 425] The electronic ticket management information 
5300 is management information that is stored in the 
service director information server 901 for one type of 
electronic ticket. 
15 [1 426] In Fig. 53. 1 3 types of information are stored in 
the electronic ticket management information 5300: a 
ticket name 5304, a ticket code 5305, a ticket issuer ID 
5306, a validity term 5307, a ticket private key 5308, a 
ticket public key 5309, a gate private key 5310, a gate 
20 public key 531 1 , a template code 531 2, a management 
term 5313, a user list address 5314, a merchant list 
address 5315, and a registered ticket list address 5316. 
[1 427] The ticket name 5304 is information providing 
the name of an electronic ticket, the ticket code 5305 is 
25 code information describing the type of electronic ticket, 
the ticket issuer ID 5306 is ID information for a ticket 
issuer, and the validity term 5307 is the period during 
which an electronic ticket is valid. The ticket private key 
5308 and the ticket public key 5309 are a pair of keys 
30 that are employed to authorize an electronic ticket in the 
ticket examination process, and the gate private key 
5310 and the gate public key 5311 are a pair of keys 
that are employed to authorize a gate terminal in the 
ticket examination process. The service providing sys- 
35 tern employs the ticket private key 5308 and the gate 
public key 5311 to issue an electronic ticket, and 
employs the ticket public key 5309 and the gate private 
key 5310 to set up an electronic ticket for examination at 
the gate terminal. 
40 [1428] The template code 5312 is code information 
that describes an electronic ticket template program 
and is used to generate an electronic ticket. The man- 
agement term 5313 is a period during which the elec- 
tronic ticket management information 5300 is managed 
45 by the service director information server 901 . That is, 
when the management term 5313 expires, information 
in the electronic ticket management information 5300 is 
shifted to a management form or a storage medium for 
which a lower cost is assessed. 
so [1 429] The user list address 531 4 is an address in the 
service director information server 901 at which is 
stored the user list 5301 for a user who owns the perti- 
nent electronic ticket. And the user list 5301 is list infor- 
mation in which two information entries, a ticket ID 5317 
55 and a user ID 5318 identifying the owner of the ticket, 
are made for one electronic ticket. 
[1 430] The merchant list address 531 5 is an address 
in the service director information server 901 at which is 
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stored the merchant list 5302 identifying a merchant 
who is permitted to examine the electronic ticket. And 
the merchant list 5302 is list information for the mer- 
chant ID 5319 assigned to a merchant who is permitted 
to examine the electronic ticket. 
[1431] When the contents of a ticket are to be modi- 
fied, the user list 5301 and the merchant list 5302 are 
referred to in order to specify the owner of the ticket or 
the merchant who has set up the ticket examination 
module. 

[1432] The registered ticket list address 5316 is an 
address in the service director information server 901 at 
which the registered ticket list 5303 for registered elec- 
tronic tickets is stored. The registered ticket list 5303 is 
list information, for electronic tickets that have been reg- 
istered, in which are stored seven types of information: 
a ticket ID 5320, an initial ticket examination number 
5321, a user ID 5322, a user public key 5323, a regis- 
tered ticket certificate address 5324, a ticket examina- 
tion response list address 5325, and a former user 
information address 5326. 

[1433] The user ID 5321 and the user public key 5323 
are an ID and a public key for a user (the owner of an 
electronic ticket) who has registered an electronic ticket 
(the ticket ID 5320). The initial ticket examination 
number 5321 is the initial value of the ticket examination 
number for an electronic ticket. And the registered ticket 
certificate address 5324 is an address in the service 
director information server 901 at which a registered 
ticket certificate for an electronic ticket is stored. 
[1434] The initial ticket examination number 5321 is 
an arbitrary number that the service providing system 
sets before issuing an electronic ticket. The ticket exam- 
ination number is incremented each time the ticket 
examination process is performed. In the ticket refer- 
ence process, the service providing system employs the 
ticket examination number to examine the ticket status 
11103 and the variable ticket information 11104 that 
have been modified to determine whether they match. 
[1435] In the ticket reference process, first, the service 
providing system examines the registered ticket list 
5303 to determine whether the electronic ticket has 
been registered. Then, the service providing system 
employs the user public key 5323 to examine the user 
digital signature in the ticket examination response 
6703, and employs the registered ticket certificate to 
examine the ticket digital signature in the ticket exami- 
nation response 6703. Further, the service providing 
system employs the ticket examination number to 
examine the ticket status 1 1 103 and the variable ticket 
information 1 1 1 04 that have been modified to determine 
whether they match. 

[1436] The ticket examination response list address 
5325 is an address in the service director information 
server 901 at which is stored list information for a ticket 
examination response (a ticket examination response 
that is uploaded to the service providing system in the 
ticket reference process). 



[1437] The former user information address 5326 is 
an address in the service director information server 
901 at which is stored former user information 5327 
concerning a preceding owner (user) of the electronic 
s ticket. When an electronic ticket that is registered is 
transferred to another user, the service providing sys- 
tem updates the registered ticket list 5303 to reflect the 
new user information, and the old user information is 
managed as the former user information 5327. 
w [1438] The former user information 5327 consists of 
five types of information: a user ID 5328, a user public 
key 5329. a registered ticket certificate address 5330, a 
ticket examination response list address 5331, and a 
former user information address 5332. These 
is addresses correspond respectively to the user ID 5322, 
the user public key 5323, the registered ticket certificate 
address 5324, the ticket examination response list 
address 5325 and the former user information address 
5326, all of which are in the registered ticket list. In addi- 
20 tion, when another owner preceded the present owner, 
the former user information address 5332 is an address 
of the former user information for the pertinent owner. 
[1439] That is, when the electronic ticket that is regis- 
tered is transferred, the user ID 5322, the user public 
25 key 5323, the registered ticket certificate address 5324, 
the ticket examination response list address 5325 and 
the former user information address 5326 are updated, 
and at the former user information address 5326, the 
information stored in those portions before the updating 
30 is pointed to as the former user information 5327 

[1440] Since the electronic ticket is managed in the 
above described manner, the usage condition of the 
electronic ticket can be precisely understood even when 
it is transferred. 
35 [1441] The electronic payment management informa- 
tion 5400 is management information that is stored in 
the service director information server 901 for one type 
of electronic payment card. 

[1442] In Fig. 54, 12 types of information are stored in 
40 the electronic payment card management information 
5400: a card name 5403, a card code 5404, a payment 
card issuer ID 5405, a validity term 5406, a card private 
key 5407, a card public key 5408, an accounting 
machine private key 5409, an accounting machine pub- 
45 lie key 5410, a template code 5411, a management 
term 5412, a merchant list address 5413, and a regis- 
tered card list address 5414. 

[1443] The card name 5403 is information providing 
the name of an electronic payment card, the card code 

so 5404 is code information describing the type of elec- 
tronic payment card, the payment card issuer ID 5405 is 
ID information for a payment card issuer, and the validity 
term 5406 is the period during which an electronic pay- 
ment card is valid. The card private key 5407 and the 

55 card public key 5408 are a pair of keys that are 
employed to authorize an electronic payment card in the 
payment card clearing process, and the accounting 
machine private key 5409 and the accounting machine 
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public key 541 0 are a pair of keys that are employed to 
authorize the merchant terminal 102 or 103 or the auto- 
matic vending machine 104 in the payment card clear- 
ing process. The service providing system employs the 
card private key 5407 and the accounting machine pub- 
lic key 5410 to issue an electronic payment card, and 
employs the card public key 5408 and the accounting 
machine private key 5409 to set up an electronic pay- 
ment card that a merchant handles at the merchant ter- 
minal 102 or 103 or the automatic vending machine 
104. 

[1444] The template code 5411 is code information 
that describes an electronic payment card template pro- 
gram and is used to generate an electronic payment 
card. The management term 5412 is a period during 
which the electronic payment card management infor- 
mation 5400 is managed by the service director infor- 
mation server 901. That is, when the management term 
5412 expires, information in the electronic payment card 
management information 5400 is shifted to a manage- 
ment form or a storage medium for which a lower cost is 
assessed. 

[1445] The merchant list address 5413 is an address 
in the service director information server 901 at which is 
stored the merchant list 5401 identifying a merchant 
who is permitted to use the electronic payment card. 
And the merchant list 5401 is list information for the 
merchant ID 5415 assigned to a merchant who is per- 
mitted to handle the electronic payment card. 
[1446] The registered card list address 5414 is an 
address in the service director information server 901 at 
which the registered card list 5402 for registered elec- 
tronic payment cards is stored. The registered card list 
5402 is list information, for electronic payment cards 
that have been registered, in which are stored seven 
types of information: a card ID 5416, an initial micro- 
check issuing number 541 7, a user ID 5418, a user pub- 
lic key 541 9, a registered card certificate address 5420, 
a micro-check list address 5421, and a former user 
information address 5422. 

[1447] The user ID 541 8 and the user public key 541 9 
are an ID and a public key for a user (the owner of an 
electronic payment card) who has registered an elec- 
tronic payment card (the card ID 5416). The initial 
micro-check issuing number 5417 is the initial value of 
the micro-check issuing number for an electronic pay- 
ment card. And the registered card certificate address 
5420 is an address in the service director information 
server 901 at which a registered card certificate for an 
electronic payment card is stored. 
[1448] The initial micro-check issuing number 5417 is 
an arbitrary number that the service providing system 
sets before issuing an electronic payment card. The 
micro-check issuing number is incremented each time 
the payment card clearing process is performed (each 
time the micro-check is issued). In the payment card ref- 
erence process, the service providing system employs 
the micro-check issuing number to examine the amount 



of payment 1 1303, the card status 1 1304 and the total 
remaining value 11305 that have been modified to 
determine whether they match. 
[1449] In the payment card reference process, first, 

5 the service providing system examines the registered 
card list 5402 to determine whether the electronic pay- 
ment card has been registered. Then, the service pro- 
viding system employs the user public key 5419 to 
examine the user digital signature in the micro-check, 

10 and employs the registered card certificate to examine 
the card digital signature in the micro-check. Further, 
the service providing system employs the micro-check 
issuing number to examine the amount of payment 
11303, the card status 11304 and the total remaining 

is value 11305 that have been modified to determine 
whether they match. 

[1450] The micro-check list address 5421 is an 
address in the service director information server 901 at 
which is stored list information for a micro-check (a 

20 micro-check that is uploaded to the service providing 
system in the payment card reference process). 
[1451] The former user information address 5422 is 
an address in the service director information server 
901 at which is stored former user information 5423 

25 concerning a preceding owner (user) of the electronic 
payment card. When an electronic payment card that is 
registered is transferred to another user, the service 
providing system updates the registered card list 5402 
to reflect the new user information, and the old user 

30 information is managed as the former user information 
5423. 

[1452] The former user information 5423 consists of 
five types of information: a user ID 5424, a user public 
key 5425, a registered card certificate address 5426, a 
35 micro-check list address 5427, and a former user infor- 
mation address 5428. These addresses correspond 
respectively to the user ID 5418, the user public key 

5419, the registered card certificate address 5420, the 
micro-check list address 5421 and the former user infor- 

40 mation address 5422, all of which are in the registered 
card list. In addition, when another owner preceded the 
present owner, the former user information address 
5428 is an address of the former user information for the 
pertinent owner. 

45 [1 453] That is, when the electronic payment card that 
is registered is transferred, the user ID 5418, the user 
public key 5419, the registered card certificate address 

5420, the micro-check list address 5421 , and the former 
user information address 5422 are updated, and at the 

so former user information address 5422, the information 
stored in those portions before the updating is pointed 
to as the former user information 5423. 
[1 454] Since the electronic payment card is managed 
in the above described manner, the usage condition of 

55 the electronic payment card can be precisely under- 
stood even when it is transferred. Thus, even when the 
transfer of an electronic payment card that is partially 
used is permitted, the safety of the system is not deteri- 
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orated. 

[1455] The electronic telephone management infor- 
mation 5500 is management information that is stored 
in the service director information server 901 for one 
type of electronic telephone card. 
[1456] In Fig. 55, 12 types of information are stored in 
the electronic telephone card management information 
5500: a card name 5503, a card code 5504, a telephone 
card issuer ID 5505, a validity term 5506, a card private 
key 5507, a card public key 5508, an accounting 
machine private key 5509, an accounting machine pub- 
lic key 5510, a template code 5511, a management 
term 5512, a communication service provider list 
address 5513, and a registered card list address 5514. 
[1457] The card name 5503 is information providing 
the name of an electronic telephone card, the card code 

5504 is code information describing the type of elec- 
tronic telephone card, the telephone card issuer ID 

5505 is ID information for a telephone card issuer, and 
the validity term 5506 is the period during which an 
electronic telephone card is valid. The card private key 
5507 and the card public key 5508 are a pair of keys 
that are employed to authorize an electronic telephone 
card in the telephone card clearing process, and the 
accounting machine private key 5509 and the account- 
ing machine public key 5510 are a pair of keys that are 
employed to authorize the electronic telephone card 
accounting machine 800 in the telephone card clearing 
process The service providing system employs the 
card private key 5507 and the accounting machine pub- 
lic key 5510 to issue an electronic telephone card, and 
employs the card public key 5508 and the accounting 
machine private key 5509 to set up an electronic tele- 
phone card that a communication service provider han- 
dles at the electronic telephone card accounting 
machine 800. 

[1458] The template code 551 1 is code information 
that describes an electronic telephone card template 
program and is used to generate an electronic tele- 
phone card. The management term 5512 is a period 
during which the electronic telephone card manage- 
ment information 5500 is managed by the service direc- 
tor information server 901. That is, when the 
management term 5512 expires, information in the elec- 
tronic telephone card management information 5500 is 
shifted to a management form or a storage medium for 
which a lower cost is assessed. 
[1459] The communication service provider list 
address 5513 is an address in the service director infor- 
mation server 901 at which is stored the communication 
service provider list 5501 identifying a communication 
service provider who is permitted to handle the elec- 
tronic telephone card. And the communication service 
provider list 5501 is list information for the communica- 
tion service provider ID 551 5 assigned to a communica- 
tion service provider who is permitted to handle the 
electronic telephone card. 

[1460] The registered card list address 5514 is an 



address in the service director information server 901 at 
which the registered card list 5502 for registered elec- 
tronic telephone cards is stored. The registered card list 
5502 is list information, for electronic telephone cards 
5 that have been registered, in which are stored seven 
types of information: a card ID 5516, an initial micro- 
check issuing number 5517, a user ID 5518, a user pub- 
lic key 5519, a registered card certificate address 5520, 
a telephone micro-check list address 5521, and a 
w former user information address 5522. 

[1461] The user ID 5518 and the user public key 5519 
are an ID and a public key for a user (the owner of an 
electronic telephone card) who has registered an elec- 
tronic telephone card (the card ID 5516). The initial 
is micro-check issuing number 5517 is the initial value of 
the micro-check issuing number for an electronic tele- 
phone card. And the registered card certificate address 
5520 is an address in the service director information 
server 901 at which a registered card certificate for an 
20 electronic telephone card is stored. 

[1462] The initial micro-check issuing number 551 7 is 
an arbitrary number that the service providing system 
sets before issuing an electronic telephone card. The 
micro-check issuing number is incremented each time 
25 the telephone card clearing process is performed (each 
time the telephone micro-check is issued). In the tele- 
phone card reference process, the service providing 
system employs the micro-check issuing number to 
examine the amount of payment 1 1303, the card status 
30 11304 and the total remaining value 11305 that have 
been modified to determine whether they match. 
[1463] In the telephone card reference process, first, 
the service providing system examines the registered 
card list 5502 to determine whether the electronic tele- 
35 phone card has been registered. Then, the service pro- 
viding system employs the user public key 5519 to 
examine the user digital signature in the telephone 
micro-check, and employs the registered card certifi- 
cate to examine the card digital signature in the tele- 
40 phone micro-check Further, the service providing 
system employs the micro-check issuing number to 
examine the amount of payment 1 1303, the card status 
11304 and the total remaining value 11305 that have 
been modified to determine whether they match. 
45 [1464] The telephone micro-check list address 5521 is 
an address in the service director information server 
901 at which is stored list information for a telephone 
micro-check (a telephone micro-check that is uploaded 
to the service providing system in the telephone card 
so reference process). 

[1465] The former user information address 5522 is 
an address in the service director information server 
901 at which is stored former user information 5523 
concerning a preceding owner (user) of the electronic 
>5 telephone card. When an electronic telephone card that 
is registered is transferred to another user, the service 
providing system updates the registered card list 5502 
to reflect the new user information, and the old user 
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information is managed as the former user information 
5523. 

[1466] The former user information 5523 consists of 
five types of information: a user ID 5524, a user public 
key 5525, a registered card certificate address 5526, a 
micro-check list address 5527, and a former user infor- 
mation address 5528. These addresses correspond 
respectively to the user ID 5518, the user public key 

5519, the registered card certificate address 5520, the 
micro-check list address 5521 and the former user infor- 
mation address 5522, all of which are in the registered 
card list. In addition, when another owner preceded the 
present owner, the former user information address 
5528 is an address of the former user information for the 
pertinent owner. 

[1 467] That is, when the electronic telephone card that 
is registered is transferred, the user ID 5518, the user 
public key 5519, the registered card certificate address 

5520, the micro-check list address 5521 , and the former 
user information address 5522 are updated, and at the 
former user information address 5522, the information 
stored in those portions before the updating is pointed 
to as the former user information 5523. 

[1468] Since the electronic telephone card is man- 
aged in the above described manner, the usage condi- 
tion of the electronic telephone card can be precisely 
understood even when it is transferred. Thus, even 
when the transfer of an electronic telephone card that is 
partially used is permitted, the safety of the system is 
not deteriorated. 

[1469] A detailed explanation will now be given for the 
contents of messages that are exchanged by devices, 
and the operations performed by the individual devices 
during the mobile electronic commerce service 
processing. 

[1470] First, an explanation will be given for the con- 
tents of messages that are exchanged by devices, and 
the operations performed by the devices during the indi- 
vidual processes performed for network hierarchial stor- 
age and management 

[1471] An explanation will now be given for the con- 
tents of messages that the mobile user terminal 100, 
the gate terminal 101, the merchant terminal 102 and 
the merchant terminal 103 exchange with the service 
providing system 110 in the remote access process. 
The remote access process is a process for the down- 
loading of data from the service providing system 1 1 0 in 
order to access data at a remote address. This process 
is hereinafter called a remote access process. 
[1472] In Fig. 56A is shown the remote access proc- 
ess performed by the mobile user terminal 100, and in 
Figs. 85A and 85B are shown the contents of the mes- 
sages that are to be exchanged by the mobile user ter- 
minal 100 and the service providing system. 
[1473] When data to be accessed is located at the 
remote address, the mobile user terminal 100 gener- 
ates a remote access request 5600, i.e., a message 
requesting that the user processor in the service provid- 



ing system 1 10 access data, and transmits it to the user 
processor. 

[1474] As is shown in Fig. 85A, a digital signature 
8504 of a user is provided for data that consists of a 
5 remote access header 8500. which is header informa- 
tion indicating the message is the remote access 
request 5600 and describing the data structure of the 
request; a data address 8501 , which indicates a remote 
address; a user ID 8502; and an issued time 8503, 
10 which indicates the date when the remote access 
request 5600 was issued. The data are closed and are 
addressed to the service provider, thereby providing the 
remote access request 5600. 

[1475] The user processor in the service providing 
is system 110 receives the remote access request 5600. 
decrypts it and examines the digital signature, and gen- 
erates a remote access data message 5601 and trans- 
mits it to the mobile user terminal 1 00. 
[1 476] As is shown in Fig. 85B, the digital signature of 
20 a service provider is provided for data that consist of a 
remote access header 8508, which is header informa- 
tion indicating that the message is the remote access 
data 5601 and describing the data structure of the 
remote access data; data that are requested 8509; a 
25 service provider ID 8510; and an issued time 8511, 
which indicates the date on which the remote access 
data 5601 was issued. The data are closed and 
addressed to the user, thereby providing the remote 
access data 5601. 
30 [1477] The mobile user terminal 100 receives the 
remote access data 5601 , decrypts it, examines the dig- 
ital signature, stores it in the temporary area, and 
accesses the data. 

[1478] Similarly, in Fig. 57A is shown the remote 
35 access process performed by the gate terminal 101 or 
the merchant terminal 102 or 103, and in Figs. 86Aand 
86B are shown the contents of messages that are to be 
exchanged by the gate terminal 101 or the merchant 
terminal 102 or 103 and the service providing system. 
40 [1479] When data to be accessed is located at the 
remote address, the gate terminal 101 or the merchant 
terminal 102 or 103 generates a remote access request 
5700, i.e., a message requesting that the merchant 
processor in the service providing system 110 access 
45 data, and transmits it to the merchant processor. 

[1480] As is shown in Fig. 86 A, a digital signature 
8605 of a merchant is provided for data that consist of a 
remote access header 8600, which is header informa- 
tion indicating the message is the remote access 
so request 5700 and describing the data structure of the 
request; a data address 8601, which indicates a remote 
address; a gate ID or an accounting machine ID 8602; a 
merchant ID 8603; and an issued time 8604. which indi- 
cates the date on which the remote access request 
55 5700 was issued. The data are closed and are 
addressed to the service provider, thereby providing the 
remote access request 5700. 

[1 481 ] The merchant processor in the service provid- 
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ing system 110 receives the remote access request 
5700, decrypts it and examines the digital signature, 
and generates a remote access data message 5701 
and transmits it to the gate terminal 101 or to the mer- 
chant terminal 102 or 103. 

[1482] As is shown in Fig. 86B, a digital signature of a 
service provider is provided for data that consist of a 
remote access header 8609 t which is header informa- 
tion indicating that the message is the remote access 
data 5701 and describing the data structure of the 
remote access data; data that are requested 8610; a 
service provider ID 8611; and an issued time 8612, 
which indicates the date on which the remote access 
data 5701 was issued. The data are closed and are 
addressed to the merchant, thereby providing the 
remote access data 5701 . 

[1483] The gate terminal 101 or the merchant terminal 
102 or 103 receives the remote access data 5701, 
decrypts it and examines the digital signature, stores it 
in the temporary area, and accesses the data. 
[1484] Next, an explanation will be given for the con- 
tents of messages that the mobile user terminal 100, 
the gate terminal 101, the merchant terminal 102, the 
merchant terminal 103, the accounting machine 3555 
(automatic vending machine 104) and the electronic tel- 
ephone accounting machine 800 (switching center 105) 
exchange with the service providing system 110 during 
the data updating process. The data updating process 
is a process whereby the service providing system 
updates the data in the RAM 1502 of the mobile user 
terminal 100, or the RAM and the hard disk of the mer- 
chant terminal 102, the merchant terminal 103 or the 
accounting machine 3555 (automatic vending machine 
104). This process is hereinafter called a data updating 
process. 

[1485] In Fig. 56B is shown the data updating process 
performed by the mobile user terminal 100. and in Figs. 
87A to 87E are shown the contents of messages that 
the mobile user terminal 100 exchanges with the serv- 
ice providing system 110. 

[1486] When the value held by the clock counter 
matches the value in the update time register, the 
mobile user terminal 1 00 begins the data updating proc- 
ess. The mobile user terminal 100 generates a data 
update request 5602, i.e., a message requesting that 
the user processor of the service providing system 110 
update data, and transmits it to the user processor. 
[1487] As is shown in Fig. 87A, a digital signature of a 
user is provided for data that consists of a data update 
request header 8700, which is header information indi- 
cating the message is the data update request 5602 
and describing the data structure of the request 5602; a 
user ID 8701 ; and an issued time 8702, which indicates 
the date on which the data update request 5602 was 
issued. The data are closed and are addressed to the i 
service provider, thereby providing the data update 
request 5602. 

[1488] The user processor of the service providing 



system 110 receives the data update request 5602, 
decrypts it and examines the digital signature, and gen- 
erates a data update request response 5603. i.e., a 
message indicating the range of data to be uploaded, 
5 and transmits it to the mobile user terminal 1 00. 

[1489] As is shown in Fig. 87B, a digital signature of a 
service provider is provided for data that consists of a 
data update request response header 8707, which is 
header information indicating that the message is the 
10 data update request response 5603, and describing the 
data structure of the response 5603; an update option 
code 8708 indicating the range of data to be uploaded; 
a service provider ID 8709; and an issued time 8710, 
which indicates the date on which the data update 
is request response 5603 was issued. The data are closed 
and are addressed to the user, thereby providing the 
data update request response 5603. 
[1490] The update option code 8708 is code informa- 
tion that indicates the range of data to be uploaded from 
20 the mobile user terminal to the service providing sys- 
tem. This code is employed to designate data for chang- 
ing the service data area, data for changing the service 
data area and the user area, all the data in the service 
data area, all the data in the service data area and the 
25 user area, or all the data in the basic program area, the 
service data area and the user area. The update option 
code 8708 is designated by the user processor in the 
service providing system, and the same code is not 
always designated each time. 
30 [1491] The mobile terminal 100 receives the data 
update request response 5603, decrypts it and exam- 
ines the digital signature, and generates data that are 
designated with the update option code 8708. Then, the 
mobile user terminal 100 generates upload data 5604, 
35 i.e., a message that indicates the data that are to be 
uploaded to the service providing system 110, and 
transmits the data to the service providing system. 
[1492] If a large volume of data is to be uploaded to 
the service system, the data are divided into a plurality 
40 of packets, which are transmitted as upload data 5604. 
[1493] As is shown in Fig. 87C, a digital signature of a 
user is provided for data that consists of an upload data 
header 8715, which is header information indicating that 
the message is the upload data 5604 and describing the 
45 data structure; an upload packet number 8716 indicat- 
ing a packet number for each of a plurality of packets; 
compressed upload data 8717 that are obtained by 
compressing the data that are to be uploaded to the 
service providing system; a user ID 871 8; and an issued 
50 time 871 9. which indicates the date on which the upload 
data 5604 was issued. The data are closed and are 
addressed to the user, thereby providing the upload 
data 5604. 

[1494] The user processor of the service providing 
>5 system receives the upload data 5604, and decrypts it 
and examines the digital signature. Then, the user proc- 
essor decompresses the compressed upload data 8717 
and compares the obtained data with the terminal data 
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4607 in the user information server 902 and the other 
data managed in the user data management informa- 
tion 4600. Then, the user processor generates update 
data 5605, which is a message for the updating of data 
in the RAM 1502 of the mobile user terminal 100, and 5 
transmits them to the mobile user terminal 100. If a 
large volume of data is to be uploaded to the service 
system, the data are divided into a plurality of packets, 
which are transmitted as upload data 5605. 
[1495] As is shown in Fig. 87D, a digital signature of a 10 
service provider is provided for data that consists of an 
update data header 8724, which is header information 
indicating that the message is the update data 5605 and 
describing the data structure; an update packet number 
8725 indicating a packet number when the data are is 
divided into a plurality of packets; compressed update 
data 8726 that are obtained by compressing update 
data; a service provider ID 8727; and an issued time 
8728, which indicates the date on which the update data 
5605 was issued. The data are closed and are 20 
addressed to the user, thereby providing the update 
data 5605. 

[1496] The mobile user terminal 100 receives the 
update data 5605, decrypts it and examines the digital 
signature, decompresses the update data 8726. and 25 
updates the data in the RAM 1502. 
[1 497] In order to generate data for updating the RAM 
1502, when there is no extra space in the object data 
area of the mobile user terminal 1 00, the user processor 
of the service providing system 110 compares the 30 
access times for the individual credit cards in the credit 
card list, and assigns a local address to the object data 
address for the credit card for which the access time is 
the latest; compares the access times for the individual 
tickets in the ticket list, and assigns a local address to 35 
the electronic ticket address for the ticket for which the 
access time is the latest; compares the access times for 
the individual payment cards in the payment card list, 
and assigns a local address to the electronic payment 
card address for the payment card for which the access 40 
time is the latest; compares the access times for the 
individual telephone cards in the telephone card list, 
and assigns a local address to the electronic telephone 
card address for the telephone card for which the 
access time is the latest; and compares the use times of 45 
the information items and assigns a local address to the 
use information address for the information for which 
the use time is the latest. When the version of the pro- 
gram of the mobile user terminal must be upgraded, the 
data in the basic program area are updated. so 
[1 498] When the user processor of the service provid- 
ing system 1 10 compares the upload data and finds an 
illegal alteration of data, the user processor generates, 
instead of the update data 5605, a mandatory expiration 
instruction 5605' that is a message for halting the func- ss 
tion of the mobile user terminal 100, and transmits the 
instruction 5605' to the mobile user terminal 100. 
[1499] As is shown in Fig. 87E, a digital signature of a 



service provider is provided for data that consists of a 
mandatory expiration header 8733, which is header 
information indicating that the message is the manda- 
tory expiration instruction 5605' and describing the data 
structure; a service provider ID 8734; and an issued 
time 8735, which indicates that the date on which the 
mandatory expiration instruction 5605* was issued. The 
data are closed and are addressed to the user, thereby 
providing the mandatory expiration instruction 5605'. 
[1500] Upon receipt of the mandatory expiration 
instruction 5605*. the mobile user terminal 100 decrypts 
it and examines the digital signature, and changes the 
terminal status 1802 to "use disabled/ As a result, the 
use of the mobile user terminal 100 is inhibited. 
[1501] Through the data updating process, informa- 
tion that is comparatively frequently used is stored in the 
RAM of the mobile user terminal, the latest version of 
the program is maintained for the mobile user terminal, 
and the illegal alteration of the terminal data can be pre- 
vented. 

[1 502] In Fig. 57B is shown the data updating process 
performed by the gate terminal 101, the merchant termi- 
nal 102, the merchant terminal 103, the accounting 
machine 3555 (automatic vending machine 104) and 
the electronic telephone card accounting machine 800 
(switching center 105), and in Figs. 88A to 88E are 
shown the contents of messages that are exchanged by 
the service providing system 110 and the gate terminal 
101 , the merchant terminal 102, the merchant terminal 
103. the accounting machine 3555 or the electronic tel- 
ephone card accounting machine 800. 
[1503] When the value held by the clock counter 
matches the value in the update time register, the gate 
terminal 101, the merchant terminal 102, the merchant 
terminal 103. the accounting machine 3555 or the elec- 
tronic telephone card accounting machine 800 begins 
the data updating process. The gate terminal 101, the 
merchant terminal 102, the merchant terminal 103. the 
accounting machine 3555 or the electronic telephone 
card accounting machine 800 generates a data update 
request 5702, i.e., a message requesting that the mer- 
chant processor of the service providing system 110 
update data, and transmits it to the merchant processor. 
[1 504] As is shown in Fig. 88A, a digital signature of a 
merchant (communication service provider) is provided 
for data that consists of a data update request header 
8800. which is header information indicating the mes- 
sage is the data update request 5702 and describing 
the data structure of the request 5702; an accounting ID 
(or a gate ID for the gate terminal) 8801 ; a merchant ID 
8802 (a communication service provider ID for the elec- 
tronic telephone card accounting machine) 8802; and 
an issued time 8803, which indicates the date on which 
the data update request 5702 was issued. The data are 
closed and are addressed to the service provider, 
thereby providing the data update request 5702. 
[1 505] The merchant processor of the service provid- 
ing system 110 receives the data update request 5702, 
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decrypts it, examines the digital signature, generates a 
data update request response 5703, i.e., a message 
indicating the range of data to be uploaded, and trans- 
mits it to the gate terminal 101, the merchant terminal 
102, the merchant terminal 103. the accounting 5 
machine 3555 or the electronic telephone card account- 
ing machine 800. 

[1 506] As is shown in Fig. 88B. a digital signature of a 
service provider is provided for data that consists of a 
data update request response header 8808, which is 10 
header information indicating that the message is the 
data update request response 5703, and describing the 
data structure of the response 5703; an update option 
code 8809 indicating the range of data to be uploaded; 
a service provider ID 8810; and an issued time 8811. is 
which indicates that the date on which the data update 
request response 5703 was issued. The data are closed 
and are addressed to the merchant (communication 
service provider for the electronic telephone card 
accounting machine), thereby providing the data update 20 
request response 5703. 

[1507] The update option code 8809 is code informa- 
tion that indicates the range of data to be uploaded to 
the service providing system. This code is employed to 
designate data for changing the service data area, data 25 
for changing the service data area and the merchant 
area, all the data in the service data area, all the data in 
the service data area and the merchant area, or all the 
data in the basic program area, the service data area 
and the merchant area. The update option code 8809 is 30 
designated by the merchant processor in the service 
providing system, and the same code is not always des- 
ignated each time. 

[1508] The gate terminal 101, the merchant terminal 
102, the merchant terminal 103. the accounting 35 
machine 3555 or the electronic telephone card account- 
ing machine 800 receives the data update request 
response 5703. decrypts it and examines the digital sig- 
nature, and generates data that are designated with the 
update option code 8809. Then, the gate terminal 101 . 40 
the merchant terminal 102, the merchant terminal 103 t 
the accounting machine 3555 or the electronic tele- 
phone card accounting machine 800 generates upload 
data 5704, i.e., a message that indicates to upload the 
data to the service providing system 1 10, and transmits 45 
the data to the service providing system. 
[1509] If a large volume of data is to be uploaded to 
the service system, the data are divided into a plurality 
of packets, which are transmitted as upload data 5704. 
[1 51 0] As is shown in Fig. 88C, a digital signature of a so 
merchant (communication service provider) is provided 
for data that consists of an upload data header 8816, 
which is header information indicating that the message 
is the upload data 5704 and describing the data struc- 
ture; an upload packet number 881 7 indicating a packet ss 
number for each of a plurality of packets; compressed 
upload data 8818 that are obtained by compressing the 
data that are to be uploaded to the service providing 



system; an accounting machine ID (gate ID for the gate 
terminal) 8819; a merchant (communication service 
provider) iD 8820; and an issued time 8821, which indi- 
cates the date on which the upload data 5704 was 
issued. The data are closed and are addressed to the 
merchant (communication service provider), thereby 
providing the upload data 5704. 
[1511] The merchant processor of the service provid- 
ing system receives the upload data 5704, and decrypts 
it and examines the digital signature. Then, the mer- 
chant processor decompresses the compressed upload 
data 8818 and compares the obtained data with the 
memory data 4705 in the merchant information server 
903 and the other data managed in the merchant data 
management information 4700. Then, the merchant 
processor generates update data 5705, which is a mes- 
sage for updating data in the RAM and on the hard disk 
of the gate terminal 1 01 , the merchant terminal 1 02, the 
merchant terminal 103, the accounting machine 3555 or 
the electronic telephone card accounting machine 800, 
and transmits them thereto. If a large volume of data is 
to be uploaded to the service system, the data are 
divided into a plurality of packets, which are transmitted 
as upload data 5705. 

[1 51 2] As is shown in Fig. 88D. a digital signature of a 
service provider is provided for data that consists of an 
update data header 8826. which is header information 
indicating that the message is the update data 5705 and 
describing the data structure; an update packet number 
8827 indicating a packet number when the data are 
divided into a plurality of packets; compressed update 
data 8828 that are obtained by compressing update 
data; a service provider ID 8829; and an issued time 
8830, which indicates the date on which the update data 
5705 was issued. The data are closed and are 
addressed to the merchant (communication service 
provider), thereby providing the update data 5705. 
[1 51 3] The gate terminal 1 0 1 , the merchant terminal 
102, the merchant terminal 103, the accounting 
machine 3555 or the electronic telephone card account- 
ing machine 800 receives the update data 5705, 
decrypts it and examines the digital signature, decom- 
presses the update data 8828, and updates the data in 
the RAM and on the hard disk. 
[1514] In order to generate data for updating, when 
there is no extra space in the object data area or in the 
hard disk, the merchant processor of the service provid- 
ing system 110 compares the transaction times for the 
history information in the transaction list, and assigns a 
local address to the transaction information address for 
history information for which the transaction time is the 
latest. When the version of the program of the gate ter- 
minal 101, the merchant terminal 102, the merchant ter- 
minal 103, the accounting machine 3555 or the 
electronic telephone card accounting machine 800 must 
be upgraded, the data in the basic program area are 
updated. 

[1515] When the merchant processor of the service 
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providing system 110 compares the upload data and 
finds the illegal alteration of the data, the merchant 
processor generates, instead of the update data 5705, a 
mandatory expiration instruction 5705\ which is a mes- 
sage for halting the function of the gate terminal 101, 
the merchant terminal 102, the merchant terminal 103, 
the accounting machine 3555 or the electronic tele- 
phone card accounting machine 800. and transmits the 
instruction 5705* thereto. 

[1 51 6] As is shown in Fig. 88E, a digital signature of a 
service provider is provided for data that consists of a 
mandatory expiration header 8835, which is header 
information indicating that the message is the manda- 
tory expiration instruction 5705' and describing the data 
structure; a service provider ID 8836; and an issued 
time 8837, which indicates that the date on which the 
mandatory expiration instruction 5705* was issued. The 
data are closed and are addressed to the user, thereby 
providing the mandatory expiration instruction 5705*. 
[1517] Upon receipt of the mandatory expiration 
instruction 5705', the gate terminal 101, the merchant 
terminal 102, the merchant terminal 103, the accounting 
machine 3555 or the electronic telephone card account- 
ing machine 800 decrypts it and examines the digital 
signature, and changes the terminal status (or the 
accounting machine status) to "use disabled." As a 
result, the use of the gate terminal 101, the merchant 
terminal 102, the merchant terminal 103, the accounting 
machine 3555 or the electronic telephone card account- 
ing machine 800 is inhibited. 

[1518] Through the data updating process, informa- 
tion that is comparatively frequently used is stored in the 
RAM and on the hard disk of the gate terminal 1 01 , the 
merchant terminal 102, the merchant terminal 103, the 
accounting machine 3555 or the electronic telephone 
card accounting machine 800, the latest version of the 
program is maintained for the gate terminal 101, the 
merchant terminal 102, the merchant terminal 103. the 
accounting machine 3555 or the electronic telephone 
card accounting machine 800, and the illegal alteration 
of the terminal data can be prevented. 
[1519] An explanation will now be given for the con- 
tents of messages that the mobile user terminal 101 
and the merchant terminal 102 exchange with the serv- 
ice providing system 1 1 0 during the processing for forci- 
bly updating data. During the processing for forcibly 
updating data, upon the need of urgent data dating, the 
service providing system 1 10 forcibly updates the con- 
tents of the RAM 1502 of the mobile user terminal 101 , 
or the contents of the RAM and the hard disk of the gate 
terminal 101, the merchant terminal 102, the merchant 
terminal 103, the accounting machine 3555 or the elec- 
tronic telephone card accounting machine 800. This 
process is hereinafter called a forcible data updating 
process. 

[1 520] In Fig. 56C is shown the forcible data updating 
process performed by the mobile user terminal 1 00, and 
in Figs. 87C to 87F are shown the contents of mes- 



sages that are exchanged by the mobile user terminal 
100 and the service providing system 110. 
[1521] When the data in the RAM of the mobile user 
terminal 100 must be urgently updated, such as when 

s the terms of a contract with the user are changed, the 
service providing system 110 generates a data update 
instruction 5606, i.e., a message instructing the mobile 
user terminal 100 to perform the forcible data updating 
process, and transmits it to the mobile user terminal 

w 100. 

[1 522] As is shown in Fig. 87F, the digital signature of 
a service provider is provided for data that consists of a 
data update instruction header 8740, which is header 
information indicating that the message is the data 

is update instruction 5606 and describing the data struc- 
ture; an update option code 8741 ; a service provider ID 
8742; and an issued time 8743, which indicates the date 
on which the data update instruction 5606 was issued. 
These data are closed and addressed to the user, 

20 thereby providing the data update instruction 5606. 
[1523] Upon receiving the data update instruction 
5606, the mobile user terminal 100 decrypts it and 
examines the digital signature, and generates data as 
designated by the update option code 8741. Then, the 

25 mobile user 1 00 generates upload data 5607, which is a 
message for uploading the data to the service providing 
system 110, and transmits the data 5607 to the service 
providing system. 

[1524] If a large volume of data is to be uploaded to 
30 the service system, the data are divided into a plurality 
of packets, which are transmitted as upload data 5607. 
[1525] The user processor of the service providing 
system 110 receives the upload data 5607, decrypts it 
and examines the digital signature, decompresses the 

35 compressed upload data 8717 and compares the 
obtained data with the terminal data 4607 in the user 
information server 902 and the other data in user data 
management information 4600. Then, the service pro- 
viding system 110 generates the update data 5608, 

40 which is a message for updating data in the RAM 1502 
of the mobile user terminal 100, and transmits them to 
the mobile user terminal 1 00. If a large volume of data is 
to be transmitted to the mobile user terminal 100, the 
data are divided into a plurality of packets, which are 

45 transmitted as update data 5608. 

[1526] The mobile user terminal 100 receives the 
update data 5608, decrypts it, examines the digital sig- 
nature, decompresses the compressed update data 
8726, and updates the data in the RAM 1502. 

so [1 527] When the user processor of the service provid- 
ing system compares the upload data with the other 
data and finds the illegal alteration of the data, the user 
processor generates, instead of the update data 5608, a 
mandatory expiration instruction 5608', which is a mes- 

55 sage for halting the function of the mobile user terminal 
100, and transmits the instruction 5608' to the mobile 
user terminal 100. 

[1528] Upon receipt of the mandatory expiration 
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instruction 5608\ the mobile user terminal 100 decrypts 
it, examines the digital signature, and changes the ter- 
minal status 1802 to "use disabled." As a result, the use 
of the mobile user terminal 100 is inhibited. 
[1529] In Fig. 57C is shown the forcible data updating 
process performed by the gate terminal 101, the mer- 
chant terminal 102, the merchant terminal 103, the 
accounting machine 3555 (automatic vending machine 
104) and the electronic telephone card accounting 
machine (switching center 105). In Figs. 88C to 88F are 
shown the contents of messages that are exchanged by 
the service providing system 110 and the gate terminal 
101, the merchant terminal 102, the merchant terminal 
103, the accounting machine 3555, or the electronic tel- 
ephone card accounting machine 800, 
[1 530] When the data in the RAM and on the hard disk 
of the gate terminal 101 , the merchant terminal 102, the 
merchant terminal 103, the accounting machine 3555, 
or the electronic telephone card accounting machine 
800 must be urgently updated, such as when the con- 
tents of a ticket is changed or the terms of a contract 
entered into by the service provider and the merchant 
(the communication service provider for the electronic 
telephone card accounting machine 800) are changed, 
the service providing system 110 begins the forcible 
data updating process. 

[1531] First, the merchant processor of the service 
providing system 110 generates a data update instruc- 
tion 5706, i.e., a message instructing the performance 
of the forcible data updating process, and transmits it to 
the gate terminal 101, the merchant terminal 102, the 
merchant terminal 103, the accounting machine 3555, 
or the electronic telephone card accounting machine 
800. 

[1 532] As is shown in Fig. 88F, the digital signature of 
a service provider is provided for data that consists of a 
data update instruction header 8842, which is header 
information indicating that the message is the data 
update instruction 5706 and describing the data struc- 
ture; an update option code 8843; a service provider ID 
8844; and an issued time 8845, which indicates the date 
on which the data update instruction 5706 was issued. 
These data are closed and addressed to the user, 
thereby providing the data update instruction 5706. 
[1533] Upon receiving the data update instruction 
5706, the gate terminal 1 01 , the merchant terminal 1 02, 
the merchant terminal 103, the accounting machine 
3555, or the electronic telephone card accounting 
machine 800 decrypts it, examines the digital signature, 
and generates data as designated by the update option 
code 8843. Then, the gate terminal 101, the merchant 
terminal 1 02, the merchant terminal 1 03, the accounting 
machine 3555, or the electronic telephone card 
accounting machine 800 generates upload data 5707, 
which is a message for uploading the data to the service 
providing system 1 10, and transmits the data 5707 to 
the service providing system. 

[1534] If a large volume of data is to be uploaded to 



the service system, the data are divided into a plurality 
of packets, which are transmitted as upload data 5707. 
[1535] The merchant processor of the service provid- 
ing system receives the upload data 5707, and decrypts 
5 it and examines the digital signature. The merchant 
processor then decompresses the compressed upload 
data 8818 and compares the obtained data with the 
memory data 4705 in the merchant information server 
903 and the other data in merchant data management 
10 information 4700. Then, the merchant processor gener- 
ates the update data 5708, which is a message for 
updating data in the RAM and on the hard disk of the 
gate terminal 101 , the merchant terminal 102, the mer- 
chant terminal 103, the accounting machine 3555, or 
is the electronic telephone card accounting machine 800, 
and transmits them thereto. If a large volume of data is 
to be transmitted to the mobile user terminal 100, the 
data are divided into a plurality of packets, which are 
transmitted as update data 5708. 
20 [1 536] The gate terminal 1 01 . the merchant terminal 
102. the merchant terminal 103, the accounting 
machine 3555, or the electronic telephone card 
accounting machine 800 receives the update data 
5708, decrypts it and examines the digital signature, 
25 decompresses the compressed update data 8828, and 
updates the data in the RAM and on the hard disk. 
[1537] When the merchant processor of the service 
providing system compares the upload data with the 
other data and finds the illegal alteration of data, the 
30 merchant processor generates, instead of the update 
data 5708, a mandatory expiration instruction 5708', 
which is a message for halting the function of the gate 
terminal 101, the merchant terminal 102, the merchant 
terminal 103, the accounting machine 3555, or the elec- 
35 tronic telephone card accounting machine 800, and 
transmits the instruction 5708* thereto. 
[1538] Upon receipt of the mandatory expiration 
instruction 5708', the gate terminal 101. the merchant 
terminal 102, the merchant terminal 103, the accounting 
40 machine 3555, or the electronic telephone caiti 
accounting machine 800 decrypts it and examines the 
digital signature, and changes the terminal statue (or 
the accounting machine status) to "use disabled." As a 
result, the use of the gate terminal 101, the merchant 
45 terminal 1 02. the merchant terminal 1 03. the accounting 
machine 3555, or the electronic telephone card 
accounting machine 800 is inhibited. 
[1539] An explanation will now be given for the con- 
tents of messages that the mobile user terminal 100 
so and the merchant terminal 1 04 exchange with the serv- 
ice providing system 110 during the processing for the 
data backup. During this processing, when the remain- 
ing battery capacity of the mobile user terminal 100 is 
small, the contents of the RAM are automatically 
55 backed up in the user information server of the service 
providing system. This process is hereinafter called a 
data backup process. 

[1540] In Fig. 56D is shown the data backup process 
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performed by the mobile user terminal 100, and in Figs. 
87A to 87E are shown the contents of messages that 
are exchanged by the mobile user terminal 100 and the 
service providing system 1 1 0. The data backup process 
is performed in substantially the same manner as is the 5 
data updating process. In the backup process, when the 
mobile user terminal 100 receives the update data 5612 
and updates the data in the RAM 1502, the terminal 1 00 
changes the terminal status 1802 to "writing disabled," 
and inhibits the input of new data to the RAM until there 10 
is an adequate available battery capacity. 
[1 541 ] When the battery capacity is reduced until it is 
equal to or smaller than Q, the mobile user terminal 1 00 
generates a data backup request 5609, i.e., a message 
requesting that the user processor of the service provid- is 
ing system 110 perform the data backup process, and 
transmits it to the user processor. 
[1542] The user processor of the service providing 
system receives the data update request 5609, 
decrypts it and examines the digital signature, and gen- 20 
erates a data update request response 5610, i.e., a 
message indicating the range of data to be uploaded, 
and transmits it to the mobile user terminal 100. 
[1 543] The mobile user terminal 1 00 receives the data 
update request response 5610, decrypts it and exam- 25 
ines the digital signature, and generates data desig- 
nated by the update option code 8708. Then, the mobile 
user terminal 100 generates upload data 5611, i.e., a 
message that indicates to upload the data to the service 
providing system 110, and transmits the data 5611 to 30 
the service providing system 110. 
[1544] The user processor of the service providing 
system 1 1 0 receives the upload data 561 1 , decrypts it, 
and examines the digital signature. Then, the user proc- 
essor decompresses the compressed upload data 35 
871 7, and compares the obtained data with the terminal 
data 4607 in the user information server 902 and the 
other data in the user data management information 
4600. Then, the user processor generates the update 
data 5612, which is a message for updating data in the 40 
RAM 1502 of the mobile user terminal 100, and trans- 
mits them to the mobile user terminal 100. 
[1545] The mobile user terminal 100 receives the 
update data 5612, decrypts it and examines the digital 
signature, decompresses the compressed update data 45 
8726, and updates the data in the RAM 1502. In addi- 
tion, the mobile user terminal 100 changes the terminal 
status 1802 to "writing disabled," and inhibits the entry 
of new data in the RAM until there is an adequate bat- 
tery capacity. 50 
[1 546] When the user processor of the service provid- 
ing system compares the upload data with the other 
data and finds the illegal alteration of data, the service 
providing system 110 generates, instead of the update 
data 5612, a mandatory expiration instruction 561 2\ ss 
which is a message for halting the function of the mobile 
user terminal 1 00, and transmits the instruction 561 2' to 
the mobile user terminal 100. 



[1547] Upon receipt of the mandatory expiration 
instruction 5612', the mobile user terminal 100 decrypts 
it, examines the digital signature, changes the terminal 
status 1802 to "use disabled" and "writing disabled." As 
a result, the use of the mobile user terminal 1 00 is inhib- 
ited. 

[1 548] Similarly, in Fig. 57D is shown the data backup 
process performed by the merchant terminal 103, and in 
Figs. 88A to 88E are shown the contents of messages 
that are exchanged by the merchant terminal 103 and 
the service providing system 110. The data backup 
process is performed in substantially the same manner 
as for the data updating process. In the backup process, 
when the merchant terminal 103 receives the update 
data 5712 and updates the data in the RAM 3002, the 
merchant terminal 103 changes the terminal status 
3302 to "writing disabled," and inhibits the input of new 
data to the RAM until there is an adequate available bat- 
tery capacity. . 
[1549] When the battery capacity is reduced until rt is 
equal to or smaller than Q, the merchant terminal 103 
generates a data backup request 5709, i.e., a message 
requesting that the merchant processor of the service 
providing system 1 10 perform the data backup process, 
and transmits it to the merchant processor. 
[1 550] The merchant processor of the service provid- 
ing system receives the data update request 5709, 
decrypts it and examines the digital signature, and gen- 
erates a data update request response 5710, i.e., a 
message indicating the range of data to be uploaded, 
and transmits it to the merchant terminal 103. 
[1 551 ] The merchant terminal 1 03 receives the data 
update request response 5710, decrypts it, examines 
the digital signature, and generates data designated by 
the update option code 8809. Then, the merchant termi- 
nal 103 generates upload data 5711, i.e., a message 
that indicates to upload the data to the service providing 
system 1 10, and transmits the data 571 1 to the service 
providing system. 

[1 552] The merchant processor of the service provid- 
ing system receives the upload data 571 1 , decrypts and 
it and examines the digital signature. Then, the mer- 
chant processor decompresses the compressed upload 
data 8818, and compares the obtained data with the 
memory data 4705 in the merchant information server 
903 and the other data in the merchant data manage- 
ment information 4700. Then, the merchant processor 
generates the update data 5712, which is a message for 
updating data in the RAM 3002 of the merchant terminal 
103. and transmits them to the merchant terminal 103. 
[1 553] The merchant terminal 1 03 receives the update 
data 5712, decrypts it and examines the digital signa- 
ture decompresses the compressed update data 8826. 
and updates the data in the RAM 3002. In addition, the 
merchant terminal 103 changes the terminal status 
3302 to "writing disabled," and inhibits the entry of new 
data in the RAM until there is an adequate battery 
capacity. 
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[1554] When the merchant processor of the service 
providing system compares the upload data with the 
other data and finds the illegal alteration of the data, the 
merchant processor generates, instead of the update 
data 5712, a mandatory expiration instruction 571 2', 
which is a message for halting the function of the mer- 
chant terminal 103, and transmits the instruction 5712* 
to the merchant terminal 103. 

[1555] Upon receipt of the mandatory expiration 
instruction 5712', the merchant terminal 103 decrypts it 
and examines the digital signature, and changes the 
terminal status 3302 to "use disabled" and Writing disa- 
bled." As a result, the use of the merchant terminal 103 
is inhibited. 

[1556] An explanation will now be given for the con- 
tents of messages that are exchanged by devices dur- 
ing the ticket order processing. 

[1557] In Fig. 58 are shown the procedures used for 
exchanging messages by the devices during the ticket 
order processing, and in Figs. 89A and 89B and Figs. 
90A and 90B are shown the contents of messages that 
are exchanged by devices during the ticket order 
processing. 

[1558] First, when a user displays the ticket order 
screen on the mobile user terminal 100 and performs a 
ticket order operation 5800, the mobile user terminal 
transmits a ticket order 5801 to the service providing 
system via digital wireless telephone communication. 
[1 559] As is shown in Fig. 89A, the digital signature of 
a user is provided for data that consists of a ticket order 
header 8900, which is header information indicating that 
the message is the ticket order 5801 and indicating the 
data structure; a service code 8901 , which identifies the 
type of service requested by the user; a ticket order 
code 8902, which identifies the order code of a ticket 
entered by the user; a desired ticket date 8903; a 
desired number of tickets 8904; a request number 8905, 
which is arbitrarily generated as a number that uniquely 
represents the ticket order processing; a user ID 8906; 
and an issued time 8907, which indicates the date on 
which the ticket order 5801 is issued. These data are 
closed and addressed to the service providing system, 
thereby providing the ticket order 5801. The service 
code 8901 identifies the ticket order for a ticket issuer 
selected by the user. 

[1 560] Upon receiving the ticket order 580 1 , the user 
processor of the service providing system 1 1 0 decrypts 
it and examines the digital signature, and transmits it to 
the service manager processor. Then, the service man- 
ager processor generates a service director processor t 
to form a process group for processing a ticket order 
8908. The service director processor refers to the ticket 
issuer list 5203 and generates a ticket order 8920 for the 
ticket issuer identified by the service code 8901. The 
ticket issuer processor closes the ticket order 8920 and s 
addresses it to the ticket issuer, and transmits the 
resultant order as a ticket order 1 1 402 to the ticket issu- 
ing system 107. 



[1561] As is shown in Fig. 89B, the digital signature of 
a service providing system is provided for data that con- 
sist of a ticket order header 8912, which is header infor- 
mation indicating that the message is the ticket order 
5 5802 and describing the data structure; a ticket order 
code 8913; a desired ticket date 8914; a desired 
number of tickets 8915; a request number 8916; a cus- 
tomer number 8917, which uniquely identifies a user for 
the ticket issuer; a service provider ID 8918; and an 
10 issued time 89 1 9, which indicates the date on which the 
ticket order 5802 was issued. These data are closed 
and addressed to the ticket issuer, thereby providing the 
ticket order 5802. 

[1562] The customer number 8917 is identification 
15 information for a user that is useful only to the ticket 
issuer, and differs from the user ID or the telephone 
number. When there was a previous transaction to 
which the user and the ticket issuer were parties, the 
customer number that is registered in the customer 
20 table of the ticket issuer is designated. The customer 
table is indicated by using the customer table address 
5230 of the ticket issuer list 5203. 
[1 563] Upon receiving the ticket order 5802, the ticket 
issuing system 107 decrypts it and examines the digital 
25 signature. The ticket issuing server 1 100 employs the 
customer information in the customer information server 
1101 and the ticket issuing condition of the ticket infor- 
mation server 1103 to generate a ticket order response 
5803, which is a message prepared as a response to 
30 the ticket order 5802, and transmits it to the service pro- 
viding system. 

[1 564] As is shown in Fig. 90 A, the digital signature of 
a ticket issuer is provided for data that consists of a 
ticket order response header 9000, which is header 
35 information indicating that the message is the ticket 
order response 5803 and describing the data structure; 
a response code 9001, which identifies the type of 
response prepared for the ticket order 5802; a request 
number 9002; a customer number 9003; a ticket sales 
40 offer 9004, which constitutes an offer made by the ticket 
issuer to the user; an offer number 9005. which is an 
arbitrarily generated number that uniquely represents 
the offer made to the user; a validity term 9006 for the 
ticket sales offer 9004; a ticket issuer ID 9007; and an 
45 issued time 9008, which indicates the date on which the 
ticket order response 5803 was issued. These data are 
closed and addressed to the service provider, thereby 
providing the ticket order response 5803. 
[1565] The response code 9001 identifies the type of 
so response prepared for a ticket order, such as "ticket 
available," "sold out," "over ticket limit," or "ticket order 
code error," 

[1566] The ticket sales offer 9004 is text information 
for the order received from the user, and includes the 
s seat number for an available ticket or the price of a 
ticket. The digital signature of a ticket issuer is provided 
for the ticket sales offer. When a ticket can not be issued 
because all tickets have been sold, the ticket sales offer 
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is not set. 

[1567] The ticket issuing system 107 can specify a 
customer using the customer number 8917 that is 
included in the ticket order 5802. Before generating the 
ticket order response 5803, the ticket issuing system s 
107 can change the seat or the price of the ticket 
included in the ticket sales offer 9004 based on the pur- 
chase history of the customer. 
[1 568] Upon receiving the ticket order response 5803. 
the ticket issuer processor of the service providing sys- 10 
tern decrypts it and examines the digital signature, and 
transmits it to the service director processor. The serv- 
ice director processor uses a ticket order response 
9009 to generate a ticket order response 9023. The 
user processor closes the ticket order response 9023 is 
and addresses IT to the user, and transmits it as a ticket 
order response 5804 to the mobile user terminal. 
[1 569] As is shown in Fig. 90B, the digital signature of 
a service provider is provided for data that consists of a 
ticket order response header 9014, which is header 20 
information identifying the message as the ticket order 
response 5804 and describing the data structure; a 
response code 9015; a response message 9016, which 
comprises the contents of the response to the ticket 
order; a request number 9017; a ticket sales offer 9018; 25 
an offer number 9019; a validity term 9020 for the ticket 
sales offer 9018; a service provider ID 9021; and an 
issued time 9022, which indicates the date on which the 
ticket order response 5804 was issued. These data are 
closed and addressed to the user, thereby providing the 30 
ticket order response 5804. 

[1 570] The response message 9016 is a standardized 
text message that the service director processor sets in 
accordance with the response code 9001. When the 
response code 9001 is not code indicating "ticket avail- 36 
able." a standardized message is prepared that com- 
prises the contents of the response code. 
[1 571 ] Upon receiving the ticket order response 5804, 
the mobile user terminal decrypts it and examines the 
digital signature, and displays the contents of the ticket * 
order response 5804 on the LCD 303. The ticket order 
processing is thereafter terminated. When the response 
code 9015 indicates "ticket available," the contents of 
the ticket sales offer 9018 are displayed. In the other 
cases, the response message 9016 is displayed. * 
[1572] An explanation will now be given for the con- 
tents of messages that are exchanged by devices dur- 
ing the ticket purchase processing. 
[1573] In Fig. 59 are shown the procedures for the 
exchange of messages by devices during the ticket pur- s 
chase processing. In Figs. 91 A and 91 B, 92Aand 92B, 
93A and 93B, 94A and 94B, and 95A and 95B are 
shown the contents of messages that are exchanged by 
devices during the ticket purchase processing. 
[1574] First, when a user performs a ticket purchase 1 
order operation 5900, the mobile user terminal trans- 
mits a ticket purchase order 5901 to the service provid- 
ing system through digital wireless telephone 



communication. 

[1 575] As is shown in Fig. 91 A, the digital signature of 
a user is provided for data that consists of a ticket pur- 
chase order header 9100, which is header information 
identifying the message as the ticket purchase order 
5901 and describing the data structure; a response 
code 9101, which identifies the type of service 
requested by the user; a ticket sales offer 9102, which is 
included in the ticket order response 5804; an offer 
number 9103, which identifies the ticket sales offer 
9102; a payment service code 9104, which identifies a 
credit card designated by the user; a payment value 
9105; a payment option code 9106, which identifies a 
payment option, such as the number of payments des- 
ignated by the user; a request number 9107, which is an 
arbitrarily generated number that uniquely represents 
the ticket purchase processing; a validity term 9108 for 
the ticket purchase order 5901 ; a user ID 9109; and an 
issued time 91 10, which is the date on which the ticket 
purchase order 5901 was issued. These data are 
closed and addressed to the service provider, thereby 
providing the ticket purchase order 5901. The service 
code 9101 identifies the purchase of a ticket from a 
ticket issuer who issued the ticket sales offer 9102. 
[1576] Upon receivi ng the ticket purchase order 5901 , 
the user processor of the service providing system 110 
decrypts it and examines the digital signature, and 
transmits it to the service manager processor. Then, the 
service manager processor generates a service director 
processor to form a process group that processes a 
ticket order 8908. The service director processor refers 
to the ticket issuer list 5203 and generates a ticket pur- 
chase order for the ticket issuer indicated by the service 
code 9101. The ticket issuer processor closes the ticket 
order and addresses it to the ticket issuer, and transmits 
the resultant order as a ticket purchase order 5902 to 
the ticket issuing system 107. 

[1 577] As is shown in Fig. 91 B, the digital signature of 
a service providing system is provided for data that con- 

i sists of a ticket purchase order header 91 15. which is 
header information indicating that the message is the 
ticket purchase order 5902 and describing the data 
structure; an offer number 91 16. which identifies a ticket 
sales offer issued by the ticket issuer; a payment serv- 

> ice code 91 1 7; a payment value 91 1 8; a payment option 
code 91 19; a request number 9120; a customer number 
9121. which uniquely represents a user for the ticket 
issuer; a validity term 9122 for the ticket purchase order 
5902; a service provider ID 9123; and an issued time 

0 9124! which is the date on which the ticket purchase 
order 5902 was issued. These data are closed and 
addressed to the ticket issuer, thereby providing the 
ticket purchase order 5902. 

[1578] When there was a previous transaction to 
■5 which the user and the ticket issuer were parties, a cus- 
tomer number that is registered in the customer table of 
the ticket issuer is established as the customer number 
9121. When there was no previous transaction, the 
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service director processor generates for the ticket issuer 
a number that uniquely represents the user, establishes 
it as the customer number 9121, and registers that 
number in the customer table. The customer table is 
designated by using the customer table address 5230 of 5 
the ticket issuer list 5203. 

[1 579] Upon receiving the ticket order 5902, the ticket 
issuing system 107 decrypts it and examines the digital 
signature. The ticket issuing server 1100 updates the 
data in the customer information server 1 101 , the ticket w 
issuing information server 1 102 and the ticket informa- 
tion server 1103, generates ticket data (9219) for the 
ordered ticket, and transmits, to the service providing 
system, an electronic ticket issuing commission 5903. 
which constitutes a message requesting the process for is 
issuing an electronic ticket that corresponds to the ticket 
and the process for settling the price of the ticket. 
[1 580] As is shown in Fig. 92A, the digital signature of 
a ticket issuer is provided for data that consists of an 
electronic ticket issuing commission header 9200, 20 
which is header information identifying the message as 
the electronic ticket issuing commission 5903 and 
describing the data structure; a transaction number 
9201, which is an arbitrarily generated number that 
uniquely identifies a transaction to which a user is a 25 
party; a sales value 9202, which conveys the price of a 
ticket; a clearing option 9203, which indicates which 
clearing procedures apply; a request number 9204; a 
ticket code 9205, which identifies the type of electronic 
ticket that is to be issued; a template code 9206, which 30 
identifies a template program to be used for an elec- 
tronic ticket that is to be issued; a number of tickets 
9207, which indicates how many tickets are to be 
issued; ticket data 9208; representative component 
information 9209; a ticket issuer ID 921 0; and an issued 35 
time 9210, which is the date on which the electronic 
ticket issuing commission 5903 was issued. These data 
are closed and addressed to the service provider, 
thereby providing the electronic ticket issuing commis- 
sion 5903. 40 
[1581] The clearing option 9203 is information by 
which the ticket issuing system designates, to the serv- 
ice providing system, the procedures to be used for 
clearing the price of a ticket. The clearing process is 
roughly divided into a spontaneous clearing process for as 
issuing an electronic ticket to a user after the price of the 
ticket has been cleared, and a delayed clearing process 
for clearing the price of a ticket after an electronic ticket 
has been issued. The clearing option 9203 is used to 
designate either clearing process. so 
[1582] In the delayed clearing process, since an elec- 
tronic ticket is issued to a user before the clearing proc- 
ess Is performed, the user does not have to wait. 
[1583] For example, based on a purchase history 
maintained for customers, the ticket issuer can desig- 55 
nate the delayed clearing process for a customer with 
whom it has had dealings and who is known to be trust- 
worthy, and can designate the spontaneous clearing for 



a customer with whom it has had no previous dealings. 
[1 584] The ticket data 9208 is ticket information issued 
by the ticket issuer. A number of ticket information items 
equivalent to the number of tickets 9207 are established 
as the ticket data 9208. For one ticket, the digital signa- 
ture of a ticket issuer is provided for data that consist of 
a ticket ID 9216, ticket information 9217 and a ticket 
issuer ID 921 8, and the ticket information is thereby pro- 
vided. The ticket information 9217 is ASCII information 
describing the contents of a ticket. For the ticket infor- 
mation 9217, the title of a ticket, the date, the location, 
the seat class, the sponsor and whether it can be trans- 
ferred, and the usage condition information, such as the 
number of coupon tickets, when the ticket is used as a 
coupon ticket are described using a form whereby tag 
information representing various information types is 
additionally provided. 

[1585] The representative component information 
9209 is information that is established as the represent- 
ative component information 1932 for an electronic 
ticket to be generated. Therefore, the representative 
component information 9209 may not be set for use. 
[1 586] The ticket issuer processor of the service pro- 
viding system receives the electronic ticket issuing com- 
mission 5903. decrypts it and examines the digital 
signature, and transmits it to the service director proc- 
essor. The service director processor performs the elec- 
tronic ticket issuing process and the ticket price clearing 
process in accordance with the clearing procedures 
designated by using the clearing option 9203. 
[1587] In Fig. 59 is shown the spontaneous clearing 
process. The delayed clearing process will be described 
later. 

[1588] For the spontaneous clearing, the service 
director processor generates a clearing request 9324, 
which is a message requesting the clearing of the price 
of a ticket. The transaction processor processor closes 
the clearing request 9324 and addresses it to the trans- 
action processor, and then transmits it as a clearing 
request 5904 to the transaction processing system 1 06. 
[1 589] As is shown in Fig. 93B, the digital signature of 
a service provider is provided for data that consists of a 
clearing request header 9314, which is header informa- 
tion indicating that the message is the clearing request 
5904 and describing the data structure; a user clearing 
account 9315, which includes a credit card that corre- 
sponds to the payment service code designated by the 
user; a ticket issuer clearing account 931 6, which desig- 
nates the clearing account of a ticket issuer; a payment 
value 9317; a payment option code 9318; a request 
number 9319, which is issued by the mobile user termi- 
nal 100; a transaction number 9320, which is issued by 
the ticket issuing system; a validity term 9321, which 
presents the period during which the clearing request 
5904 is effective; a service provider ID 9322; and an 
issued time 9323, which indicates the date on which the 
clearing request 5904 was issued. These data are 
closed and addressed to the transaction processor, 
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thereby providing the clearing request 5904. 
[1590] The transaction processing system 106 
receives the clearing request 5904, decrypts it and 
examines the digital signature, and performs the clear- 
ing process. Then, the transaction processing system s 
106 generates a clearing completion notification 5905, 
and transmits it to the service providing system 110. 
[1 591 ] As is shown in Fig. 94A ( the digital signature of 
a transaction processor is provided for data that consist 
of a clearing completion notification header 9400, which to 
is header information indicating that the message is the 
clearing completion notification 5905 and describing the 
data structure; a clearing number 9401, which is an 
arbitrarily generated number that uniquely represents 
the clearing process performed by the transaction is 
processing system 106; a user clearing account 9402; a 
ticket issuer clearing account 9403; a payment value 
9404; a payment option code 9405; a request number 
9406; a transaction number 9407; clearing information 
9408 for a service provider that is accompanied by the 20 
digital signature of the transaction processor; clearing 
information 9409 for a ticket issuer that is accompanied 
by the digital signature of the transaction processor; 
clearing information 9410 for a user that is accompa- 
nied by the digital signature of the transaction proces- 25 
sor; a transaction processor provider ID 9411; and an 
issued time 941 2. which indicates the date on which the 
clearing completion notification was issued. These data 
are closed and addressed to the service provider, 
thereby providing the clearing completion notification 30 
5905. 

[1592] Upon receiving the clearing completion notifi- 
cation 5905, the transaction processor processor of the 
service providing system 1 10 decrypts it and examines 
the digital signature, and transmits a clearing comple- 35 
tion notification 9413 to the service director processor. 
Upon receiving the clearing completion notification 
9413, the service director processor generates a clear- 
ing completion notification 9430 for the ticket issuer. The 
ticket issuer processor closes the clearing completion 40 
notification 9430, and transmits it to the ticket issuing 
system 107 as a clearing completion notification 5906 
for the ticket issuer. 

[1 593] As is shown in Fig. 94B t the digital signature of 
a service provider is provided for data that consist of a 45 
clearing completion notification header 9417, which is 
header information indicating that the message is the 
clearing completion notification 5906 and describing the 
data structure; a clearing number 9418; a customer 
number 9419; a ticket issuer ID 9420; a payment serv- so 
ice code 9421 ; a payment value 9422; a payment option 
code 9423; a request number 9424; a transaction 
number 9425; clearing information 9426 for a ticket 
issuer that is accompanied by the digital signature of the 
transaction processor; a transaction processor ID 9427; ss 
a service provider ID 9428; and an issued time 9429, 
which indicates the date on which the clearing comple- 
tion notification was issued. These data are closed and 



addressed to the ticket issuer, thereby providing the 
clearing completion notification 5906. 
[1594] Upon receiving the clearing completion notifi- 
cation 5906, the ticket issuing system decrypts it and 
examines the digital signature, and generates a receipt 
5907 and transmits it to the service providing system. 
[1 595] As is shown in Fig. 95A, the digital signature of 
a ticket issuer is provided for data that consists of a 
receipt header 9500, which is header information indi- 
cating that the message is the receipt 5907 and describ- 
ing the data structure; a customer number 9501; ticket 
issuing information 9502; a payment service code 9503; 
a payment value 9504; a payment option code 9505; a 
request number 9506; a transaction number 9507; 
clearing information 9508; a transaction processor ID 
9509; a ticket issuer ID 9510; and an issued time 951 1 , 
which indicates the date on which the receipt 5907 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the receipt 5907. 
The ticket issuing information 9502 is information con- 
cerning the ticket issuing process performed by the 
ticket issuing system, and is accompanied by the digital 
signature of the ticket issuer. 

[1596] Upon receiving the receipt 5907, the ticket 
issuer processor of the service providing system 110 
decrypts it and examines the digital signature, and 
transmits a receipt 9512 to the service director proces- 
sor. The service director processor employs the receipt 
9512 to generate a receipt 9523 for a user. 
[1 5971 In addition, the service director processor gen- 
erates a clearing completion notification 9430 for the 
ticket issuing system, generates an electronic ticket to 
be issued to the user, and further generates an elec- 
tronic ticket issuing message 9227 that includes the 
electronic ticket that is generated. 
[1 598] The user processor closes the electronic ticket 
issuing message 9227 and the receipt 9523 while 
addressing them to the user, and transmits them as an 
electronic ticket issuing message 5908 and a receipt 
5909 to the mobile user terminal 1 00 via digital wireless 
communication. 

[1599] As is shown in Fig. 92B, the digital signature of 
a service provider is provided for data that consist of an 
electronic ticket issuing header 9220, which is header 
information indicating that the message is the electronic 
ticket issuing message 5908 and describing the data 
structure; a transaction number 9221 ; a request number 
9222; the number of tickets 9223; electronic ticket data 
9224 that are generated; a service provider ID 9225; 
and an issued time 9226, which indicates the date on 
which the electronic ticket issuing message 5908 was 
issued. These data are closed and addressed to the 
user, thereby providing the electronic ticket issuing mes- 
sage 5908. The electronic ticket data 9224 includes 
electronic tickets 9231 equivalent in number to the 
number of tickets 9223. 

[1 600] As is shown in Fig. 95B, the digital signature of 
a service provider is provided for data that consists of a 
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receipt header 9516, which is header information indi- 
cating that the message is the receipt 5909 and describ- 
ing the data structure; a user ID 9517; a receipt 9518 
(9512) obtained by decryption; clearing information 
951 9 for a user that is accompanied by the digital signa- s 
ture of a transaction processor; ticket issuing informa- 
tion 9520; a service provider ID 9521; and an issued 
time 9522, which indicates the date on which the receipt 
5909 was issued. These data are closed and addressed 
to the user, thereby providing the receipt 5909. The 10 
ticket issuing information 9520 is information for the 
electronic ticket issuing process performed by the serv- 
ice providing system, and is accompanied by the digital 
signature of the service provider. 

[1601] Upon receiving the electronic ticket issuing is 
message 5908 and the receipt 5909, the mobile user 
terminal decrypts them and examines the digital signa- 
tures, enters in the ticket list 1712 an electronic ticket 
included in the electronic ticket issuing message 5908, 
enters the receipt 9523 in the use list 1 715. and displays 20 
the electronic ticket on the LCD 303. 
[1602] The generation of an electronic ticket by the 
service director processor is performed as follows. 
[1603] First, the service director processor refers to 
the electronic ticket template list 4905 for the ticket 25 
issuer that is stored in the ticket issuer information 
server. Then, by using the electronic ticket template pro- 
gram that is identified by the template code 9206 of the 
electronic ticket issuing commission 5903, the service 
director processor generates a ticket program for an 30 
electronic ticket. Specifically, the ticket program data 
1913 for an electronic ticket are generated using the 
transaction module and the display module, which are 
described as being located at the transaction module 
address 4919, and the display module address 4920 in 35 
the electronic ticket template list 4905, and the repre- 
sentative component information 9209 in the electronic 
ticket issuing commission 5903. When the representa- 
tive component information 9209 is not present in the 
electronic ticket issuing commission 5903, the default 40 
representative component information located at the 
default representative component information address 
4921 is employed as the information for an electronic 
ticket. 

[1 604] Following this and based on the usage condi- as 
tion information included in the ticket information 9217, 
the service director processor generates the ticket sta- 
tus 1907 and the variable ticket information 1908. 
Whether the ticket status 1907 can be transferred is 
designated, and when the ticket is used as a coupon so 
ticket, the number of coupons is employed as the varia- 
ble ticket information 1 907. The service director proces- 
sor generates a new pair consisting of a ticket signature 
private key and a ticket signature public key, and further 
generates the ticket program 1901 for an electronic ss 
ticket by employing the ticket private key and the gate 
public key that are registered in the electronic ticket 
management information 5300. 



[1605] Furthermore, the service director processor 
generates an electronic ticket by employing the 
obtained ticket signature public key to generate the cer- 
tificate 1903 for the electronic ticket, and by employing 
the ticket data 9219 in the electronic ticket issuing com- 
mission 5903 to generate the presentation ticket 1902 
for the electronic ticket 

[1606] The procedures for the delayed clearing will 
now be described. 

[1607] In Fig. 60 are shown the procedures for 
exchanging messages between the devices in the ticket 
purchase process for the delayed clearing. The same 
process is performed as is used for the spontaneous 
clearing until the ticket issuing system transmits the 
electronic ticket issuing commission to the service pro- 
viding system. 

[1 608] When the delayed clearing is designated by the 
clearing option 9203, the service director processor 
generates an electronic ticket to be issued to the user, 
and also generates the electronic ticket issuing mes- 
sage 9227, which includes the generated electronic 
ticket, and a temporary receipt message 9310, which 
corresponds to a temporary receipt. The generation of 
the electronic ticket is performed in the same manner as 
that used for the spontaneous clearing. 
[1 609] The user processor closes the electronic ticket 
issuing message 9227 and the temporary receipt 9310 
and addresses them to the user, and transmits these 
messages as an electronic ticket issuing message 6004 
and a temporary receipt 6005 to the mobile user termi- 
nal 100 via digital wireless telephone communication. 
[1 61 0] As is shown in Fig. 93A, the digital signature of 
a service provider is provided for data that consists of a 
temporary receipt header 9300, which is header infor- 
mation indicating that the message is the temporary 
receipt 6005 and describing the data structure; a user 
ID 9301; ticket issuing information 9302; a payment 
service code 9303; a payment value 9304; a payment 
option code 9305; a request number 9306; a transaction 
number 9307; a service provider ID 9308; and an issued 
time 9309, which indicates the date on which the tempo- 
rary receipt 6005 was issued. These data are closed 
and addressed to the user, thereby providing the tempo- 
rary receipt 6005. The ticket issuing information 9302 is 
information concerning the electronic ticket issuing 
process that is performed by the service providing sys- 
tem, and is accompanied by the digital signature of the 
service provider. 

[1 61 1] The data structure of the electronic ticket issu- 
ing message 6004 is the same as that used for the elec- 
tronic ticket issuing message 5908. 
[1612] Upon receiving the electronic ticket issuing 
message 6004 and the temporary receipt 6005, the 
mobile user terminal decrypts them and examines the 
digital signatures, enters an electronic ticket included in 
the electronic ticket issuing message 6004 in the ticket 
list 1712, enters the temporary receipt 9310 in the use 
list 1715. and displays the electronic ticket on the LCD 
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[1 61 3] Following this, the service director processor 
performs the clearing process for the price of the ticket. 
First, the service director processor generates a clear- 
ing request 9324, which is a message requesting the 
performance of the clearing process for the price of the 
ticket The transaction processor doses the clearing 
request 9324 and addresses it to the transaction proc- 
essor, and transmits it as a clearing request 6007 to the 
transaction processing system 106. 
[1 61 4] Upon receiving the clearing request 6007, the 
transaction processing system 106 decrypts it and 
examines the digital signature, and performs the clear- 
ing process. The transaction processing system 106 
generates a clearing completion notification 6008 and 
transmits it to the service providing system 110. 
[1615] Upon receiving the clearing completion notifi- 
cation 6008, the transaction processor processor of the 
service providing system 1 10 decrypts it and examines 
the digital signature, and transmits a clearing comple- 
tion notification 9413 to the service director processor. 
The service director processor employs the received 
clearing conpletion notification 9413 to generate a 
clearing completion notification 9430 for the ticket 
issuer. And the ticket issuer processor closes the clear- 
ing completion notification 9430 and transmits it to the 
ticket issuing system 107 as a clearing completion noti- 
fication 6009 for the ticket issuer. 
[1 61 6] The ticket issuing system decrypts the received 
clearing completion notif ication 6009 and examines the 
digital signature, and generates a receipt 6010 and 
transmits it to the service providing system. 
[1 61 7] The ticket issuer processor of the service pro- 
viding system decrypts the received receipt 6010 and 
examines the digital signature, and transmits a receipt 
9512 to the service director processor. The service 
director processor employs the receipt 951 2 to generate 
a receipt 9523 for a user. 

[1 61 8] The receipt 9523 that is generated is not imme- 
diately transmitted to the mobile user terminal 100 of 
the user. When the mobile user terminal has performed 
the data updating process, the user processor replaces 
the temporary receipt 9310 in the use list 1715 with the 
receipt 9523, and transmits the receipt 9523 as one part 
of the update data 601 1 to the mobile user terminal 100. 
[1619] The data structures of the clearing request 
6007, the clearing completion notification 6008, the 
clearing completion notification 6009 and the receipt 
6010 for the delayed clearing are the same as those 
provided for the clearing request 5904. the clearing 
completion notification 5905, the clearing completion 
notif ication 5906 and the receipt 5907 for the spontane- 
ous clearing. 

[1 620] The delayed clearing process need not be per- 
formed immediately after the electronic ticket is issued, 
and together with the other clearing processes, may be 
performed, for example, once a day. 
[1621] An explanation will now be given for the con- 



tents of messages that are exchanged by the mobile 
user terminal 100 and the service providing system 1 10 
during the ticket registration processing. 
[1622] In Fig. 65A are shown the procedures for 
5 exchanging messages between devices in the ticket 
registration processing, and in Figs. 106A and 106B are 
shown the contents of messages that are exchanged by 
the devices in the ticket registration processing. 
[1623] First, when the user performs an electronic 
w ticket registration operation 6500, the mobile user termi- 
nal generates a ticket registration request 6501 and 
transmits it to the service providing system via digital 
wireless telephone communication. 
[1 624] As is shown in Fig. 1 06A, the digital signature 
is of a user is provided for data that consists of a ticket reg- 
istration request header 10600, which is header infor- 
mation indicating that the message is the ticket 
registration request 6501 and describing the data struc- 
ture* a ticket ID 1 0601 of a ticket to be registered; a user 
20 ID 10602; and an issued time 10603. which indicates 
the date on which the ticket registration request 6501 
was issued. These data are closed and addressed to 
the service provider, thereby providing the ticket regis- 
tration request 6501 . 
25 [1625] The user processor of the service providing 
system decrypts the received ticket registration request 
6501 and examines the digital signature, and transmits 
the request 6501 to the service manager processor. 
The service manager processor generates a service 
30 director processor to form a process group that proc- 
esses a ticket registration request 10604. The service 
director processor ascertains that the electronic ticket 
indicated by the ticket ID 1 0601 is registered in the ticket 
list 4610 for the user in the user information server 902, 
35 and registers that electronic ticket in the registered 
ticket list 5303 for electronic tickets of the service direc- 
tor information server 901. At this time, the service 
director processor newly generates a ticket signature 
private key and a ticket signature public key pair. Fur- 
40 then the service director processor generates a regis- 
tered ticket certificate using the ticket signature public 
key, and registers it in the registered ticket list 5303. The 
service director processor then generates a ticket certif- 
icate issuing message 13313 using the ticket signature 
45 private key and the registered ticket certificate that has 
been generated. The user processor closes the ticket 
certificate issuing message 13313 and addresses it to 
the user, and transmits it as a ticket certificate issuing 
message 6502 to the mobile user terminal via digital 
so wireless telephone communication. 

[1 626] As is shown in Fig. 106B, the digital signature 
of a service provider is provided for data that consists of 
a ticket certificate issuing header 10608. which is 
header information indicating that the message is the 
55 ticket certificate issuing message 6502 and describing 
the data structure; a ticket digital signature private key 
10609; a registered ticket certificate 10610; a service 
provider ID 10611. and an issued time 10612. which 
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indicates the date on which the ticket certificate issuing 
message 6502 was issued. These data are closed and 
addressed to the user, thereby providing the ticket cer- 
tificate issuing message 6502. 

[1627] The mobile user terminal 100 decrypts the 5 
received ticket certificate issuing message 6502 and 
examines the digital signature, replaces the ticket signa- 
ture private key and the ticket certificate of an electronic 
ticket with the ticket signature private key 1 0609 and the 
registered ticket certificate 10610, both of which are 10 
included in the ticket certificate issuing message 6502, 
changes the registration state in the ticket status to the 
post-registration state, and displays on the LCD the 
electronic ticket that has been registered (display a 
ticket that is registered; 6503) . 15 
[1628] An explanation will now be given for the con- 
tents of messages that are exchanged by the gate ter- 
minal 101 and the service providing system 110 during 
the ticket setup processing. 

[1629] In Fig. 66 are shown procedures for exchang- 20 
ing messages between the devices in the ticket setup 
processing performed when the merchant sets up at 
the gate terminal 101, a ticket to be examined. In Figs. 
109A and 109B are the contents of messages that are 
exchanged by the devices during the ticket setup 25 
processing. 

[1 630] First, when the operator (merchant) of the gate 
terminal 101 performs a ticket setup operation 6600, the 
gate terminal generates a ticket setup request 6601 and 
transmits it to the service providing system via digital 30 
telephone communication. 

[1631] As is shown in Fig. 109A, the digital signature 
of a merchant is provided for data that consists of a 
ticket setup request header 10900, which is header 
information indicating that the message is the ticket 35 
setup request 6601 and describing the data structure- a 
ticket code 10901 entered by the merchant during the 
ticket setup operation 6600; a gate ID 1 0902 for the gate 
terminal; a merchant ID 10903; and an issued time 
10904, which indicates the date on which the ticket 40 
setup request 6601 was issued. These data are closed 
and addressed to the service provider, thereby provid- 
ing the ticket setup request 6601 . 
[1 632] The merchant processor of the service provid- 
ing system decrypts the received ticket setup request 4s 
6601 and examines the digital signature, and transmits 
the request 6601 to the service manager processor. 
The service manager processor generates a service 
director processor to form a process group that proc- 
esses a ticket setup request 1 0605. The service director so 
processor ascertains that a merchant is registered in 
the merchant list 5302 for the electronic ticket that is 
identified by the ticket code 10901 for the service direc- 
tor information server 901. Then, the service director 
processor generates a ticket setup message 10919 by 55 
referring to the electronic ticket management informa- 
tion 5300, which is stored in the service director infor- 
mation server 901 for the pertinent electronic ticket, and 



the electronic ticket template list 4905, which is stored in 
the ticket issuer information server 905 of the pertinent 
ticket issuer (the ticket issuer ID 5306). Specifically, the 
service director processor generates the ticket setup 
message 1 091 9 by using the ticket examination module, 
which is located at the ticket examination module 
address 4922 in the electronic ticket template list 4905 
that is identified by the template code 5312 of the elec- 
tronic ticket management information 5300, and the 
ticket public key 5309 and the gate private key 5310, 
which are registered in the electronic ticket manage- 
ment information 5300. The merchant processor closes 
the ticket setup 1 091 9 and addresses it to the merchant, 
and transmits it as a ticket setup message 6602 to the 
gate terminal via digital telephone communication. 
[1633] As is shown in Fig. 1 09B. the digital signature 
of a service provider is provided for data that consists of 
a ticket setup header 10909, which is header informa- 
tion indicating that the message is the ticket setup mes- 
sage 6602 and describing the data structure; a ticket 
name 1 091 0 for an electronic ticket to be issued; a ticket 
code 10911; a ticket issuer ID 10912; a validity term 
10913; a gate private key 10914; a ticket public key 
10915; a ticket examination module 10916; a service 
provider ID 10917; and an issued time 10918, which 
indicates the date on which the ticket setup message 
6602 was issued. These data are closed and addressed 
to the merchant, thereby providing the ticket setup mes- 
sage 6602. 

[1 634] The mobile user terminal decrypts the received 
ticket setup message 6602 and examines the digital sig- 
nature, registers, in the ticket list 2409, electronic ticket 
examination program information that is included in the 
ticket setup message 6602, and displays on the touch 
panel LCD a message indicating that the ticket setup 
process has been completed (display the setup comple- 
tion; 6603). 

[1635] An explanation will now be given for the con- 
tents of messages that are exchanged by the mobile 
user terminal 100 and the gate terminal 101 during the 
ticket examination processing. 
[1636] In Fig. 67 are shown procedures for the 
exchange of messages by the devices during the ticket 
examination processing, and in Figs. 11 OA and 11 0B 
and Figs. 1 1 1 A and 1 1 1 B are the contents of the mes- 
sages that are exchanged by the devices during the 
ticket examination processing. 

[1 637] First, when a user performs a ticket presenta- 
tion operation 6700, the mobile user terminal generates 
a ticket presentation message 6701 by using an elec- 
tronic ticket to be examined and an arbitrarily generated 
test pattern, and transmits it to the gate terminal via 
infrared communication. 

[1638] As is shown in Fig. 1 10A, the ticket presenta- 
tion message 6701 consists of a ticket presentation 
header 11000, which is header information indicating 
that the message is the ticket presentation message 
6701 and describing the data structure; a service code 
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11001, which identifies the request lor the examination 
of an electronic ticket; a request number 1 1 002, which is 
an arbitrarily generated number that uniquely repre- 
sents the ticket examination process; a ticket 1 1003 for 
presenting an electronic ticket to be examined; a ticket 
certificate 11004; the current ticket status of an elec- 
tronic ticket that is to be examined; variable ticket infor- 
mation 1 1006; a ticket ID 1 1007; an issued time 1 1008, 
which indicates the date on which the ticket presenta- 
tion message 6701 was issued; and a gate test pattern 
11010, which is an arbitrarily generated test pattern. 
The digital signature is provided, using the ticket signa- 
ture private key of an electronic ticket, for the ticket sta- 
tus 11005, the variable ticket information 11006, the 
ticket ID 11007 and the issued time 11008. The gate 
test pattern is encrypted using the gate public key. 
[1 639] The presentation ticket 1 1 003, the ticket certif- 
icate 1 1004, the ticket status 11005, the variable ticket 
information 11006, the ticket ID 11007 and the issued 
date 1 1008 specify the contents of the electronic ticket 
for the gate terminal, and the gate test pattern 1 1010 is 
a test pattern for authorizing the gate terminal. 
[1640] Upon receiving the ticket presentation mes- 
sage 6701 , first, the gate terminal refers to the ticket list 
2409, activates a ticket examination module that corre- 
sponds to the ticket code of the electronic ticket that is 
presentation, examines the validity of the contents of 
the ticket presentation message 6701 , and generates a 
ticket examination message 6702 and transmits it to the 
mobile user terminal via infrared communication. 
[1 641 ] In the verification process for the validity of the 
ticket presentation message 6701, the gate terminal 
employs the fact that the ticket certif icate 1 1 004 is a reg- 
istered ticket certif icate and examines the ticket status 
11005 and the variable ticket information 11006 to 
determine whether an electronic ticket that is to be 
examined is valid. Then, the gate terminal examines the 
presentation ticket 11003, the digital signature of the 
service provider that is provided for the ticket certificate 

11004, and the validity term. Further, the gate terminal 
employs the ticket signature public key of the ticket cer- 
tificate 11004 to examine the digital signature of the 
electronic ticket that is provided for the ticket status 

11005, the variable ticket information 11006, the ticket 
ID 1 1007, and the issued time 1 1008. Thus, the validity 
of the ticket presentation message 6701 is verified. 
[1 642] In the generation of the ticket examination mes- 
sage 6702, the gate terminal decrypts the gate test pat- 
tern 1 1010 using the gate private key, and employs the 
ticket public key to encrypt the ticket test pattern 1 1 108 
that is arbitrarily generated. 

[1 643] As is shown in Fig. 1 1 0B, the digital signature 
of a merchant is provided for the data that consists of a 
ticket examination header 1 1012, which is header infor- 
mation indicating that the message is the ticket exami- 
nation message 6702 and describing the data structure; 
a transaction number 11013; a response message 
11014; a request number 11015; a ticket ID 11016; an 



instruction code 11017; a gate test pattern 11018, 
which is decrypted; a ticket test pattern 11019. which is 
an arbitrarily generated test pattern; a gate ID 1 1021 ; a 
merchant ID 11022; and an issued time 11023, which 
5 indicates the date on which the ticket examination mes- 
sage 6702 was issued. Thus, the ticket examination 
6702 is provided. Trie ticket test pattern 11019 is 
encrypted using the ticket public key. 
[1644] The transaction number 11013 is a number, 
10 arbitrarily generated by the gate terminal, that uniquely 
represents the ticket examination process. When, as a 
result of the examination of the ticket presentation mes- 
sage 6701, the ticket examination process can not be 
performed (the electronic ticket is one that can not be 
is examined by the pertinent gate terminal), a value of 0 is 
set. When the ticket examination process can be per- 
formed, a value other than 0 is set. 
[1 645] The response message 1 1 01 4 is text informa- 
tion constituting the message transmitted by the mer- 
20 chant to the user. When the gate terminal can not 
examine an electronic ticket that is presented (transac- 
tion number = 0). data to that effect is included in the 
response message. The response message is option- 
ally set, and may not be reset. 
25 [1646] The instruction code 1 1017 is command code 
information for an electronic ticket that indicates how the 
ticket status and variable ticket information of the elec- 
tronic ticket can be changed. The instruction code is 
varied by combining the electronic ticket transaction 
30 module and the ticket examination module. 

[1647] When the mobile user terminal receives the 
ticket examination message 6702, first, in order to verify 
the gate terminal the mobile user terminal compares the 
gate test pattern 11010 with the gate test pattern 1 101 8 
35 included in the ticket examination message 6702, and 
changes the ticket status and the variable ticket informa- 
tion of the electronic ticket in accordance with the 
instruction code 11017. Then, the mobile user terminal 
decrypts the ticket test patten using the ticket private 
40 key, generates a ticket examination response 6703, and 
transmits it to the gate terminal via infrared communica- 
tion. , . 
[1 648] As is shown in Fig. 1 1 1 A, the digital signature 
using the ticket signature private key and the digital sig- 
45 nature of a user are provided for the data that consist of 
a ticket examination response header 11100. which is 
header information indicating that the message is the 
ticket examination response 6703 and describing the 
data structure; a ticket examination number 11101, 
so which indicates the order of the ticket examination proc- 
ess; a ticket test pattern 11102, which is decrypted; a 
ticket status 11103 and variable ticket information 
11104, which are modified; a gate ID 1 1 1 05; a merchant 
ID 11106- a request number 11107; a transaction 
55 number 11108; a ticket code 11109; a ticket ID 11110; 
and an issued time 1 1 1 1 1, which indicates the date on 
which the ticket examination response 6703 was 
issued. In this fashion, the ticket examination response 
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6703 is provided. 

[1649] Upon receiving the ticket examination 
response 6703, first, the gate terminal authorizes the 
electronic ticket by comparing the ticket test pattern 
111019 with the ticket test pattern 11102 that is 
included in the ticket examination response 6703, 
examines the validity of the contents of the ticket exam- 
ination response 6703, and generates an examination 
certificate 6704 and transmits it to the mobile user ter- 
minal via infrared communication. 
[1650] In the verification process for the validity of the 
ticket examination response 6703, the gate terminal 
determines whether the ticket status 11 1 03 and the var- 
iable ticket information 11104 have been changed in 
accordance with the instruction code 1 1 107, and exam- 
ines the digital signature of the ticket examination 
response 6703. 

[1651] As is shown in Fig. 1 1 1B, the digital signature 
of a merchant is provided for the data that consist of an 
examination certificate header 11113. which is header 
information indicating that the message is the examina- 
tion certificate 6704 and describing the data structure; 
examination information 11114, which is text informa- 
tion indicating the contents of the ticket examination 
process; a ticket ID 1 1 1 1 5; a request number 1 1 1 1 6; a 
transaction number 1 1 1 1 7; a ticket examination number 
1 1 1 187; a gate ID 1 1 1 19; a merchant ID 1 1 120; and an 
issued time 11121, which indicates the date on which 
the examination certificate 6704 was issued. In this 
fashion, the examination certificate 6704 is provided. 
[1652] Upon receiving the examination certificate 
6704, the mobile user terminal increments the ticket 
examination number, registers the examination certifi- 
cate 6704 as usage information in the use list 1 71 5, and 
displays the examined electronic ticket on the LCD (dis- 
play the examined ticket; 6706). 
[1653] When the gate terminal has transmitted the 
examination certificate 6704, the gate terminal regis- 
ters, in the transaction list 2510, the ticket examination 
response 6703 as history information for the ticket 
examination process, and displays the results obtained 
during the ticket examination process on the touch 
panel LCD (display the results of examination; 6705). 
When the gate opening/closing device is connected to 
the gate terminal, the gate is automatically opened 
(entrance permission 6707). 

[1654] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the ticket reference processing. 
[1655] In Fig. 71 are shown procedures for the 
exchange of messages by the devices during the ticket 
reference processing, and in Figs. 88Ato 88D and Fig. 
11 6A are shown the contents of messages that are 
exchanged during the ticket reference processing. 
[1656] The ticket reference processing is not per- 
formed in accordance with a special processing 
sequence, but is performed in the data updating proc- 
ess during which the service providing system updates 



the data in the gate terminal. 

[1657] Therefore, for the ticket reference process, the 
procedures for the exchange of messages by the gate 
terminal and the service providing system, and the con- 

5 tents (data structures) of the messages to be 
exchanged are the same as those employed for the 
above described data updating processing. 
[1658] Compressed upload data 8818 in the upload 
data 5702 include a ticket examination response that is 

10 newly registered in the transaction list 2510 during the 
ticket examination process conducted during the period 
extending from the previous performance of the data 
updating process to the current performance of the data 
updating process. 

is [1659] During the data updating processing, the mer- 
chant processor transmits, to the service manager proc- 
essor, a message requesting the reference process be 
performed for the ticket examination response that is 
uploaded from the gate terminal. The service manager 

20 processor generates a service director processor to 
form a process group for examining the validity of the 
ticket examination response. 

[1 660] First, the service director processor determines 
whether the gate ID 1 1 105 and the merchant ID 1 1 106 

25 in the ticket examination response match the gate ID 
5215 of the merchant and the merchant ID 5214. Then, 
the service director processor examines the registered 
ticket list 5303 in the service director information server 
901 to verify that the electronic ticket for which the ticket 

30 examination response was issued is registered. The 
service director processor employs the user public key 
5323 to examine the digital signature of the user that 
accompanies the ticket examination response, and 
employs the registered ticket certificate to examine the 

35 digital signature for the ticket that accompanies the 
ticket examination response. In addition, the service 
director processor employs the ticket examination 
number when examining the matching of the ticket sta- 
tus with the variable ticket information that has been 

40 modified, and transmits the result of the examination to 
the merchant processor. As a result, the ticket examina- 
tion response is registered in the ticket examination 
response list. 

[1661] The merchant processor enters the received 
45 ticket reference results in the compressed update data 
8828 in the update data 5705, and transmits the data 
5705 to the gate terminal. 

[1 662] When an error occurs in the process for verify- 
ing the validity of the ticket examination response, the 
so service director processor transmits a message indicat- 
ing that an error occurred in the management system 
908. 

[1 663] Upon receiving the update data 5705, the gate 
terminal decompresses the update data 8828 and 
55 updates the data in the RAM and on the hard disk. At 
this time, the ticket reference results are registered in 
the authorization report list 251 1 of the gate terminal. 
[1664] If the firm represented by the merchant differs 
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from that represented by the ticket issuer and a pay- 
ment is made by the ticket issuer to the merchant who 
handles the ticket, or if the usage of the ticket is period- 
ically reported to the ticket issuer in accordance with the 
terms of a contract, in accordance with the ticket exam- 
ination response that is newly registered in the ticket 
examination response list, the service director proces- 
sor generates weekly, for example, a usage condition 
notification 1 1606, which is a message for notifying the 
ticket issuer of the ticket usage condition. The ticket 
issuer processor closes the notification 11606 and 
addresses it to the ticket issuer, and transmits it as a 
usage report 7100 to the ticket issuing system 107. 
[1665] As is shown in Fig. 1 16A, the digital signature 
of a service provider is provided for the data that con- 
sists of a usage report header 1 1600, which is header 
information indicating that the message is the usage 
report 7100 and describing the data structure; a ticket 
ID list 1 1601 of tickets that are employed; the merchant 
name 1 1602 and the merchant ID 1 1603 of a merchant 
that handles the ticket; a service provider ID 1 1604; and 
an issued time 11605, which indicates the date on 
which the usage report 7100 was issued. These data 
are closed and addressed to the ticket issuer, thereby 
providing the usage report 7100. 
[1666] Upon receiving the usage report 7100, the 
ticket issuing system 107 decrypts it and examines the 
digital signature, and performs such processing as mak- 
ing a payment to the merchant. 
[1667] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the ticket transfer processing. 
[1668] In Fig. 74 are shown procedures for the 
exchange of messages by the devices during the ticket 
transfer processing, and in Figs. 117A and 117B, 118A 
and 1 1 8B, and 1 19A and 1 19B are shown the contents 
of messages that are exchanged during the ticket trans- 
fer processing. The ticket transfer process can be per- 
formed when the ticket status 1907 of the electronic 
ticket indicates the transfer enabled state, which is des- 
ignated by the ticket issuer when issuing a ticket. 
[1669] In Fig. 74 is shown a case where user A trans- 
fers an electronic ticket to user B. The procedures for 
the exchange of messages by the devices belonging to 
users A and B are the same for infrared communication 
as they are for digital wireless communication. The data 
structures of messages are also the same. 
[1670] In Fig. 74, first, when user A performs a ticket 
transfer process 7400, the mobile user terminal of user 
A transmits a ticket transfer offer 7401 . which is a mes- 
sage offering to transfer an electronic ticket, to the 
mobile user terminal of user B. When at this time the 
mobile user terminals of user A and user B are con- 
nected, communication between user A and user B is 
performed via digital wireless telephone. When the 
mobile user terminals are not connected, infrared com- 
munication is employed. 

[1671] As is shown in Fig. 1 17 A, the digital signature 



of user A is provided for the data consisting of a ticket 
transfer offer header 1 1 700, which is header information 
indicating that the message is the ticket transfer offer 
7401 and describing the data structure; a transfer offer 

5 number 1 1 701 , which is an arbitrarily generated number 
that uniquely represents the ticket transfer process; a 
presentation ticket 1 1 702 and a ticket certificate 1 1 703 
for an electronic ticket to be transferred; a ticket status 
11704; variable ticket information 11705; a ticket ID 

10 1 1 706; an issued time 1 1 707, which indicates the date 
on which the ticket transfer offer 7401 was issued; and 
a user public key certificate 11709. In this fashion, the 
ticket transfer offer 7401 is provided. The digital signa- 
ture of the electronic ticket is provided, using the ticket 

is signature private key, for the ticket status 11704, the 
variable ticket information 11705, the ticket ID 11706 
and the issued time 1 1 707. 

[1672] The digital signature of the service provider is 
provided for the data that consist of a user public key 
20 header 1 1710; the user public key 1 171 1 of user A; a 
public key certificate ID 11712, which is ID information 
for the public key certificate; a certificate validity term 
11713; a service provider ID 11714; and a certificate 
issued time 11715. In this fashion, the user public key 

25 certificate 1 1 709 is provided. 

[1673] Upon receiving the ticket transfer offer 7401, 
the mobile user terminal of user B examines the presen- 
tation ticket 11702, the ticket certified 11703, and the 
digital signature of the service provider and the validity 

30 term of the public key certificate 11709. Then, the 
mobile user terminal examines the digital signature of 
the electronic ticket that is provided for the ticket status 
11704, the variable ticket information 11705, the ticket 
ID 1 1 706 and the issued time 1 1 707, and the digital sig- 

35 nature of user A accompanying the ticket transfer offer 
740 1 , and verifies the contents of the ticket transfer offer 
7401. In accordance with the presentation ticket 1 1702, 
the ticket status 11704 and the variable ticket informa- 
tion 11705, the mobile user terminal then displays, on 

40 the LCD, the contents of the electronic ticket that is to be 
transferred (display the transfer offer; 7402). 
[1674] When user B performs a transfer offer accept- 
ance operation 7403, the mobile user terminal of user B 
transmits, to the mobile user terminal of user A. a ticket 

45 transfer offer response 7404, which is a response mes- 
sage for the ticket transfer offer 7401 . 
[1675] As is shown in Fig. 117B, the digital signature 
of user B is provided for the data that consist of a ticket 
transfer offer response header 11716, which is header 

50 information indicating that the message is the ticket 
transfer offer response 7404 and describing the data 
structure; an acceptance number 1 1 71 7; a transfer offer 
number 1 1 71 8; a ticket ID 1 1 71 9; an issued time 1 1 720, 
which indicates the date on which the ticket transfer 

55 offer response 7404 was issued; and a user public key 
certificate 1 1721 . In this fashion, the ticket transfer offer 
response 7404 is provided. 

[1 676] The user public key certificate 1 1 721 is a public 
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key certificate for user B. To provide this certificate 
11721, the digital signature of the service provider is 
provided for the data that consist of a user public key 
certificate header 11722; a user public key 11723 for 
user B; a public key certificate ID 11724, which is ID 5 
information for the public key certificate; a certificate 
validity term 1 1 725; a service provider ID 1 1 726; and a 
certificate issued time 1 1727. 

[1677] The acceptance number 11717 is arbitrarily 
generated, by the mobile user terminal of user B. as a w 
number that uniquely represents the ticket transfer 
processing. With this number, the mobile user terminal 
of user A is notified as to whether user B has accepted 
the ticket transfer offer 7401. When user B does not 
accept the ticket transfer offer 7401 , a value of 0 is set is 
as the acceptance number 11717. When user B 
accepts the ticket transfer offer 7401 , a value other than 
0 is set. 

[1678] Upon receiving the ticket transfer offer 
response 7404. the mobile user terminal of user A dis- 20 
plays, on the LCD, the contents of the ticket transfer 
offer response 7404 (display the transfer offer response- 
7405). When the ticket transfer offer 7401 is accepted 
(acceptance number 1 1 71 7 * 0), the mobile user termi- 
nal of user A examines the digital signature of the serv- 25 
ice provider of the user public key certificate 1 1 721 and 
the validity term. The mobile user terminal generates a 
ticket transfer certificate 7406, which is a message that 
corresponds to a transfer certificate for an electronic 
ticket to user B, and transmits it to the mobile user ter- 30 
minal of user B. 

[1 679] As is shown in Fig. 1 1 8A, the digital signature 
of the electronic ticket and the digital signature of user A 
are provided for the data that consist of a ticket transfer 
certificate header 11800, which is header information 35 
indicating that the message is the ticket transfer certifi- 
cate 7406 and describing the data structure; a presen- 
tation ticket 11801 for an electronic ticket to be 
transferred; a ticket status 11802; variable ticket infor- 
mation 11803; a transfer offer number 11804- an 40 
acceptance number 11805; a public key certificate ID 
1 1 806 for the user public key certificate of user B* a pub- 
lic key certificate ID 1 1807 for the user public key certif- 
icate of user A; a ticket ID 11808; and an issued time 
11809, which indicates the date on which the ticket 4s 
transfer certificate 7406 was issued. These data are 
closed and addressed to user B, thereby providing the 
ticket transfer certificate 7406. 

[1680] Upon receiving the ticket transfer certificate 
7406. the mobile user terminal of user B decrypts it and so 
examines the digital signature of user A and the one 
accompanying the electronic ticket. Further, the mobile 
user terminal compares the ticket ID presented by the 
ticket transfer offer 7401 with the ticket ID 11808, and 
compares the public key certificate IDs 11806 and 55 
1 1807 with the public key certificates of users B and A 
to verify the contents of the ticket transfer certificate 
7406. The mobile user terminal then generates a ticket 



transfer receipt 7407, which is a message indicating the 
electronic ticket has been received, and transmits the 
receipt 7407 to the mobile user terminal of user A. 
[1681] As is shown in Fig. 1 18B, the digital signature 
of user B is provided for the data that consist of a ticket 
transfer receipt header 11815, which is header informa- 
tion indicating that the message is the ticket transfer 
receipt 7407 and describing the data structure; a ticket 
ID 11816; a transfer offer number 11817;an acceptance 
number 1 1818; a public key certificate ID 1 1819 for the 
user public key certificate of user A; a public key certifi- 
cate ID 1 1820 for the user public key certificate of user 
B; and an issued time 1 1821, which indicates the date 
on which the ticket transfer receipt 7407 was issued. 
These data are closed and addressed to user A, 
thereby providing the ticket transfer receipt 7407. 
[1 682] Upon receiving the ticket transfer receipt 7407, 
the mobile user terminal of user A decrypts it, and 
examines the digital signature of user B. Further, the 
mobile user terminal compares the public key certificate 
IDs 1 1819 and 1 1820 with the public key certificates of 
users B and A to verify the contents of the ticket transfer 
receipt 7407. The mobile user terminal then erases the 
transferred electronic ticket from the ticket list 1 71 2, and 
registers the ticket transfer receipt 1 1822 in use history 
1715. At this time, addresses in the object data area at 
which the transfer offer number, the code information 
indicating the ticket transfer process, the issued time for 
the ticket transfer receipt 7407 and the ticket transfer 
receipt 11822 are stored are assigned to the request 
number 1840 in the use list 1715, the service code 
1841, the use time 1842 and the use information 
address 1843. 

[1 683] The mobile user terminal of user A displays, on 
the LCD, a message indicating the completion of the 
transfer process (display the transfer process; 7408). 
The process at the mobile user terminal of user A 
(sender) is thereafter terminated. 
[1684] After transmitting the ticket transfer receipt 
7407, the mobile user terminal of user B displays the 
received ticket transfer certificate 1 181 1 on the LCD. In 
addition, the mobile user terminal displays a dialogue 
message inquiring whether the transfer process with the 
service providing server (process for downloading the 
received electronic ticket from the service providing sys- 
tem) should be immediately performed (display the 
transfer certificate; 7409). 

[1685] The dialogue message has two operating 
menus: "transfer process request" and "cancel." When 
"cancel" is selected, the transfer process performed 
with the service providing server is canceled, and in the 
process (data updating process) during which the serv- 
ice providing system updates the data in the mobile 
user terminal, an electronic ticket that has been trans- 
ferred is assigned to the mobile user terminal. 
[1 686] When user B selects "transfer process request" 
(transfer process request operation; 7410), based on 
the ticket transfer certificate 1 181 1 the mobile user ter- 
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minal generates a ticket transfer request 741 1 . which is 
a message requesting that the transfer process be per- 
formed with the service providing system, and transmits 
it to the service providing system via digital wireless tel- 
ephone communication. 

[1 687] As is shown in Fig. 1 1 9A, the digital signature 
of user B is provided for the data that consists of a ticket 
transfer request header 11900, which is header infor- 
mation indicating that the message is the ticket transfer 
request 7411 and describing the data structure, a 
decrypted ticket transfer certificate 11901 (11811); the 
user ID 11902 of user B; and an issued time 11903, 
which indicates the date when the ticket transfer request 
741 1 was issued. These data are closed and addressed 
to the service provider, thereby providing the ticket 
transfer request 741 1 . 

[1 688] Upon receiving the ticket transfer request 741 1 , 
the user processor of user B of the service providing 
system 110 decrypts it and examines the digital signa- 
ture, and transmits it to the service manager processor. 
The service manager processor generates a service 
director processor to form a process group for process- 
ing the ticket transfer request 1 1904. 
[1689] The service director processor, first refers to 
the user list 5200 and specifies the recipient (user B) 
and the sender (user A) of the transfer process by 
employing the public key certificate IDs 11806 and 
11807 in the ticket transfer certificate 11901 that is 
included in the ticket transfer request 1 1904. The serv- 
ice director processor examines the digital signature of 
the user A and the digital signature accompanying the 
electronic ticket, which are provided for the ticket trans- 
fer certificate 1 1 901 , and verifies the validity of the ticket 
transfer certificate 11901. Following this, the service 
director processor exchanges the user ID 5317 for the 
user A with that for the user B in the user list 5301 for the 
electronic ticket that is stored in the service director 
information server 901, and erases the electronic ticket 
to be transferred from the ticket list of the user A that is 
stored in the user information server 902. Then, the 
service director processor changes the ticket signature 
private key and ticket signature public key pair and the 
ticket certificate for a new key pair and a ticket certifi- 
cate, and also changes the ticket status and the variable 
ticket information to the ticket status 11802 and to the 
variable ticket information 11803 for the ticket transfer 
certificate 11901 . The service director processor gener- 
ates an electronic ticket received from user A, and 
enters it in the ticket list 4610 for the user B. 
[1690] When the electronic ticket that is to be trans- 
ferred has already been registered, the service director 
processor updates the registered ticket list 5303 holding 
the electronic ticket. Specifically, the user ID 5322, the 
user public key 5323, the registered ticket certificate 
address 5324, the ticket examination response list 
address 5325 and the former user information address 
5326, all of which are in the registered ticket list 5303, 
are updated (to the information for user B). The old 



information (information for user A) is pointed to at the 
former user information address 5326 as former user 
information 5327. 

[1691] The service director processor generates a 
5 ticket transfer message 11915. which includes an elec- 
tronic ticket transferred from user A. The user processor 
of user B closes the message 1 1915 and addresses it to 
the user B, and transmits it as a ticket transfer message 
7412 to the mobile user terminal of user B via digital 
10 wireless telephone communication. 

[1692] As is shown in Fig. 1 19B, the digital signature 
of the service provider is provided for the data that con- 
sist of a ticket transfer header 11908. which is header 
information indicating that the message is the ticket 
is transfer 7412 and describing the data structure; a trans- 
fer number 11909, which is an arbitrarily generated 
number that represents the transfer process in the serv- 
ice providing system; transfer information 11910; an 
acceptance number 11911; an electronic ticket 11912 
20 which is transferred; a service provider ID 1 1913; and 
an issued time 11914, which indicates the date when 
the ticket transfer message 7412 was issued. These 
data are closed and addressed to the user B, thereby 
providing the ticket transfer message 7412. 
25 [1 693] The transfer information 1 1 91 0 is information 
concerning the electronic ticket transfer process per- 
formed by the service providing system, and is accom- 
panied by the digital signature of the service provider. 
[1 694] The mobile user terminal of user B decrypts the 
30 received ticket transfer message 7412 and examines 
the digital signature, registers the electronic ticket 
1 1912 in the ticket list 1712, and displays the electronic 
ticket on the LCD (display the electronic ticket; 7413). 
The ticket transfer process is thereafter terminated. 
35 [1 695] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the ticket installation processing. 
[1696] In Fig. 77 are shown procedures for the 
exchange of messages by the devices during the ticket 
40 installation processing, and in Figs. 123A and 123B. 
and 124 A and 124B are shown the contents of mes- 
sages that are exchanged during the ticket installation 
processing. 

[1697] First, when the user performs an electronic 
45 ticket installation operation 7700, the mobile user termi- 
nal generates an electronic ticket installation request 
7701, and transmits it to the service providing system 
1 10 via digital wireless telephone communication. 
[1698] As is shown in Fig. 123A, the digital signature 
so of the user is provided for the data that consists of an 
electronic ticket installation request header 12300, 
which is header information indicating that the message 
is the electronic ticket installation request 7701 and 
describes the data structure; an installation card 
55 number 12301 and an installation number 1 2302. which 
are entered by a user; a request number 12303, which 
is an arbitrarily generated number that uniquely repre- 
sents the electronic ticket installation process; a user ID 
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12304; and an issued time 12305, which indicates the 
date when the electronic ticket installation request 7701 
was issued. These data are closed and addressed to 
the service provider, thereby providing the electronic 
ticket installation request 7701 . 5 
[1699] Upon receiving the electronic ticket installation 
request 7701, the user processor of the service provid- 
ing system 1 1 0 decrypts it and examines the digital sig- 
nature, and transmits it to the service manager 
processor. The service manager processor generates a io 
service director processor to form a process group for 
processing the electronic ticket installation request 
1 2306. 

[1700] First, the service director processor refers to 
the installation card list that is indicated by the installa- is 
tion card list address 5229 for the ticket issuer list 5203 
and specifies a ticket issuer who issues a ticket that is 
represented by the installation number 12301. The 
service director processor generates a ticket installation 
request 12317, which is a message requesting that the 20 
ticket issuer issue a ticket using the installation card. 
The ticket issuer processor closes the request 12317 
and addresses it to the ticket issuer, and transmits it as 
a ticket installation request 7702 to the ticket issuinq 
system 107. y 25 

[1701] As is shown in Fig. 123B, the digital signature 
of the service provider is provided for the data that con- 
sist of a ticket installation request header 12310, which 
is header information indicating that the message is the 
ticket installation request 7702 and describing the data 30 
structure; an installation card number 12311; an instal- 
lation number 12312; a request number 12313" a cus- 
tomer number 12314, which uniquely represents a user 
for the ticket issuer; a service provider ID 12315- and an 
issued time 12316, which indicates the date when the 35 
ticket installation request 7702 was issued. These data 
are closed and addressed to the ticket issuer, thereby 
providing the ticket installation request 7702. 
[1702] Upon receiving the ticket installation request 
7702, the ticket issuing system 107 decrypts it and 40 
examines the digital signature. The ticket issuing server 
1 100 compares the installation card number 1231 1 and 
the installation number 12312, which are included in the 
ticket installation request 7702, with the management 
information for the issued electronic ticket installation 45 
card that is stored in the ticket issuing information 
server 1102. The ticket issuing server 1100 then 
updates the data in the customer information server 
1102 and the ticket issuing information server 1103. 
Furthermore, the ticket issuing server generates ticket so 
data (12406) for a requested ticket, and transmits, to the 
service providing system, an electronic ticket installa- 
tion commission 7703, which is a message requesting 
the installation of an electronic ticket that corresponds 
to the requested ticket. 55 
[1703] As is shown in Fig. 124A, the digital signature 
of the ticket issuer is provided for the data that consists 
of an electronic ticket installation commission header 



12400, which is header information indicating that the 
message is the electronic ticket installation commission 
7703 and describing the data structure; a transaction 
number 12401 , which is an arbitrarily generated number 
that uniquely represents the transaction with a user- 
ticket issuing information 12402; a request number 
12403; ticket code 12404, which indicates the type of 
electronic ticket that is to be issued; a template code 
12405, which indicates a template program for an elec- 
tronic ticket to be issued; ticket data 12406; representa- 
tive component information 12407; a ticket issuer ID 
12408; and an issued time 12409, which indicates the 
date when the electronic ticket installation commission 
7703 was issued. These data are closed and addressed 
to the service provider, thereby providing the electronic 
ticket installation commission 7703. 
[1 704] The ticket issuing information 1 2402 is informa- 
tion concerning the ticket issuing process performed by 
the ticket issuing system, and is accompanied by the 
digital signature of the ticket issuer. 
[1705] The ticket data 12406 is ticket information 
issued by the ticket issuer, wherein the digital signature 
of the ticket issuer accompanies the data that consists 
of the ticket ID 12414, the ticket information 12415 and 
the ticket ID 12416. 

[1 706] The ticket issuer processor of the service pro- 
viding system decrypts the received electronic ticket 
installation commission 7703 and examines the digital 
signature, and transmits the commission 7703 to the 
service director processor. In accordance with the elec- 
tronic ticket installation commission 12410, the service 
director processor generates an electronic ticket to be 
issued to a user, using the same procedures as are 
used for the ticket purchase processing, and also gener- 
ates an electronic ticket installation message 12415. 
which is a message directing that the electronic ticket 
be installed in the mobile user terminal. The user proc- 
essor closes the electronic ticket installation message 
12455 and addressees it to a user, and transmits it as 
an electronic ticket installation message 7704 to the 
mobile user terminal via digital wireless telephone com- 
munication. 

[1707] As is shown in Fig. 1 24B, the digital signature 
of the service provider is provided for the data that con- 
sists of an electronic ticket installation header 12417, 
which is header information indicating that the message 
is the electronic ticket installation message 7704 and 
describing the data structure; a transaction number 
12418; ticket issuing information 12419, which con- 
cerns the ticket issuing process performed by the ticket 
issuing system; ticket issuing information 12420, which 
concerns the ticket issuing process performed by the 
service providing system; a request number 12421; 
generated electronic ticket code 12422; a service pro- 
vider ID 12423; and an issued time 12424, which indi- 
cates the date when the electronic ticket installation 
message 7704 was issued. These data are closed and 
addressed to the user, thereby providing the electronic 
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ticket installation message 7704. The ticket issuing 
information 12419 and the ticket issuing information 
12420 are accompanied by the digital signatures of the 
ticket issuer and the service provider. 
[1 708] The mobile user terminal decrypts the received 
electronic ticket installation message 7704 and exam- 
ines the digital signature, registers, in the ticket list 
1712 the electronic ticket included in the electronic 
ticket installation request 7704, and displays the 
installed electronic ticket on the LCD (display the elec- 
tronic ticket; 7705). 

[1709] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the ticket modification processing. 
[1710] In Fig. 80 are shown procedures for the 
exchange of messages by the gate terminal 101, the 
service providing system 1 10 and the ticket issuing sys- 
tem 107 during the processing performed to modify the 
ticket examination program of the gate terminal. In Figs. 
129A and Figs. 88C, 88D and 88F are shown the con- 
tents of messages that are exchanged by the gate ter- 
minal 101. the service providing system 110 and the 
ticket issuing system 107 during the ticket modification 
processing. In Fig. 81 are shown procedures for the 
exchange of messages by the mobile user terminal 1 00, 
the service providing system 1 10 and the ticket issuing 
system 107 during the processing performed to modify 
the electronic ticket of the mobile user terminal. In Figs. 
129A and 129B. and Figs. 130A and 130B are shown 
the contents of messages that are exchanged by the 
mobile user terminal 100, the service providing system 
1 1 0 and the ticket issuing system 1 07. 
[1711] When the contents of a ticket that was issued 
must be altered because an event was changed or an 
error was found when the ticket was issued, the ticket 
issuing system generates a modification request 8000 
or 8100, which is a message requesting the modifica- 
tion of a ticket that was issued, and transmits it to the 
service providing system. 

[171 2] As is shown in Fig. 129A. the digital signature 
of the ticket issuer is provided for the data that consist of 
a modification request header 12900. which is header 
information indicating that the message is the modifica- 
tion request 8000 or 81 00 and describing the data struc- 
ture- a modification number 12901. which is an 
arbitrarily generated number that uniquely represents 
the ticket modification processing; a modification code 
12902; a modification time limit 12903. which indicates 
the time limit for the modification; a modification mes- 
sage 12904; a ticket code 12905, which indicates the 
type of electronic ticket that is to be modif ied; a template 
code 12906, which identifies a template program for a 
modif ied electronic ticket; a ticket count 12907 that indi- 
cates the number of electronic tickets to be modified; 
modified ticket data 12908; modified representative 
component information 12909; a ticket issuer ID 12910; 
and an issued time 12911. which indicates the date 
when the ticket modification request 8000 was issued. 



These data are closed and addressed to the service 
provider, thereby providing the ticket modrfication 
request 8000 or 8100. 

[1 71 3] The modification code 1 2902 is code informa- 
s tion that identifies the type of ticket modificaton 
processing, and that indicates the modification of the 
electronic ticket information 1917, the modification of 
the representative component information 1932, the 
modrfication of the template program, or the modifica- 
10 tion accompanied by the ticket refund processing will be 

fm^The modrfication message 1 2904 specifies the 
contents of the modification, and is accompanied by the 
digital signature of the ticket issuer. ..... 

is [1715] The ticket data 12908 is modified ticket infor- 
mation for an electronic ticket to be modified. Tickets in 
a number equivalent to the ticket count 12907 are set as 
ticket data 12908. The ticket information is obtained by 
providing the digital signature of the ticket issuer for the 
20 data that consists of the ticket ID 1291 6. the ticket infor- 
mation 12917 and the ticket issuer ID 12918. When no 
modif ication of the electronic ticket information is to take 
place, the ticket data 12908 are not set. 
[1716] The representative component information 
25 10209 is set as the modif ied representative component 
information 1932 for an electronic ticket that .s to be 
modified. When no modification is scheduled tor the 
representative component information 1932, the repre- 
sentative component information 10209 is not set. 
30 [1 71 7] The ticket issuer processor of the service pro- 
viding system 110 decrypts the received modification 
request 8000 or 8100 and examines the digital signa- 
ture, and transmits the request to the service manager 
processor. The service manager processor generates a 
35 service director processor to form a process group for 
processing the modrfication request 12912. Then, the 
service director processor changes the electronic ticket 
of the mobile user terminal and the ticket examination 
program of the gate terminal in accordance with the 
40 modif ication request 12912. The ticket examination pro- 
gram for the gate terminal is changed when the tem- 
plate program is modified. 

[1718] An explanation will now be given for the 
processing performed to change the ticket examination 
45 program for the gate terminal. 

[1719] First, the service director processor generates 
a new ticket examination program by employing the 
ticket examination module, which is pointed to at the 
ticket examination module address 4922 in the elec- 
50 tronic ticket template list 4905 indicated by the itempla e 
code 12906, and the ticket public key 5309 and the gate 
private key 5310. which are registered in the electronic 
ticket management information 5300. Then, the service 
director processor refers to the examination ticket list 
55 471 1 for the gate terminal of the merchant who is regis- 
tered in the merchant list 5302 to obtain the electronic 
ticket that is to be modif ied, and specifies that the gate 
terminal for which the electronic ticket to be modified is 
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registered is an electronic ticket that the gate terminal is 
to examine. The service director processor transmits to 
the merchant processor of the gate terminal that is 
specified, a message requesting the performance of the 
forcible data updating process to update the ticket 5 
examination program. 

[1 720] The merchant processor of the specified gate 
terminal performs the forcible data updating process 
and modifies the ticket examination program of the gate 
terminal. At this time, the procedures for the exchange 10 
of messages by the gate terminal and the service pro- 
viding system, and the contents (data structures) of the 
messages that are exchanged are the same as those 
employed for the forcible data updating processing that 
was previously described. 15 
[1 721 ] The merchant processor inserts the new ticket 
examination program into the compressed update data 
8828 of the update data 5708, and transmits the result- 
ant data to the gate terminal as the update data 5708. 
[1722] Upon receiving the update data 5708. the gate 20 
terminal decompresses the update data 8828 and 
updates the data in the RAM and on the hard disk At 
this time, the ticket examination program is also regis- 
tered in the ticket list 2409 of the gate terminal. 
[1723] An explanation will now be given for the 25 
processing for modifying an electronic ticket in the 
mobile user terminal. First, the service director proces- 
sor refers to the user list 5301 for an electronic ticket to 
be modified, and specifies a user who owns the elec- 
tronic ticket that is to be modified. The service director so 
processor generates a modification notification 12928 
which is a message for notifying the specified user of 
the modification of the electronic ticket. The user proc- 
essor for the specified user closes the modification noti- 
fication 12928. addresses it to the user, and transmits it 35 
as a modification notification 8101 to the mobile user 
terminal via digital wireless telephone communication 
[1 724] As is shown in Fig. 1 29B. the digital signature 
of the service provider is provided for the data that con- 
sist of a modification notification header 1 2920, which is 40 
header information indicating that the message is the 
modification notice 8101 and describing the data struc- 
ture; a modification number 12921 ; a modification code 
ln^ 2; 3 tiGket ID 12923; a mediation message 
12924; a reply time limit 12925, which specifies the time 45 
Umi\ for the transmission of a replay (reaction selection 
8104) by the user to the modification notice 8101* a 
service provider ID 12926; and an issued time 12927 
which indicates the date on which the modification 
notice 8101 was issued. These data are closed and so 
addressed to the user, thereby providing the modifica- 
tion notice 8101. 

[1725] Upon receiving the modification notice 8101 
the mobile user terminal decrypts it and examines the 
digital signature, outputs a call arrival tone to notify the 55 
user of the reception of the modification notice 8101 
and displays a modification message 12924 on the LCD 
(display the modification notice; 8102). For example 



when the date has been changed, a message to that 
effect and a message requesting that the user select an 
action, either "accept," "refuse" or "refund," in response 
to the modification are displayed. 
[1726] When, in response to the message displayed 
on the LCD, the user employs the number key switches 
to select an action in response to the modification (reac- 
tion selection operation 8103), the mobile user terminal 
generates a reaction selection message 8104, which 
contains the response of the user to the modification 
notice 8101, and transmits it to the service providing 
system via the digital wireless telephone communica- 
tion. When the user selects "refuse" or "refund," the 
mobile user terminal changes the ticket status 1907 of 
the electronic ticket to the use disabled state. 
[1727] As is shown in Fig. 130B, the digital signature 
of the user is provided for the data that consists of a 
reaction selection header 13000, which is header infor- 
mation indicating that the message is the reaction 
selection message 8104 and describing the data struc- 
ture; a modification number 13001; a reaction code 
13002, which identifies the type of reaction to the modi- 
fication that the user selected; a ticket ID 13004, which 
is a number that is arbitrarily generated, by the mobile 
user terminal, that uniquely represents the ticket modifi- 
cation; a user ID 13005; and an issued time 13006 
which indicates the date on which the selection mes- 
sage 8104 was issued. These data are closed and 
addressed to the service provider, thereby providing the 
reaction selection message 8104. 
[1728] The user processor of the service providing 
system decrypts the received reaction selection mes- 
sage 8104, examines the digital signature, and trans- 
mits it to the service director processor. The service 
director processor updates the contents of an electronic 
ticket, or refunds the cost of the ticket in accordance 
with the reaction code 13002 contained in the reaction 
selection message 13007. When the user selects 
"refuse," the service director processor changes to the 
use disabled state the ticket status 4647 of the corre- 
sponding electronic ticket in the ticket list 4610 for the 
user, which is stored in the user information server 902. 
[1729] When the reaction code 13002 represents 
"accept," in response to the modification request 8100 
the service director processor generates a new elec- 
tronic ticket using the same procedures as those used 
during the ticket purchase processing. In addition, the 
service director processor generates a modification 
instruction 1301 7, which is a message for instructing the 
modification of a ticket, and transmits it to the user proc- 
essor. The user processor changes a corresponding 
electronic ticket in the user ticket list 4610 to an elec- 
tronic ticket that is included in the modification instruc- 
tion 13017. The user processor closes the modification 
instruction 13017 and addresses it to the user, and 
transmits it as a modification instruction 8105 to the 
mobile user terminal via digital wireless telephone com- 
munication. 
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[1730] As is shown in Fig. 130A. the digital signature 
of the service provider is provided for the data that con- 
sists of a modification reaction header 1301 1 . which is 
header information indicating that the message is the 
modification instruction 8105 and describing the data 
structure: a modification number 13012; a request 
number 13013; new electronic ticket data 13014; a 
service provider ID 13015; and an issued time 13016. 
which indicates the date on which the modification 
instruction 8105 was issued. These data are closed and 
addressed to the user, thereby providing the modifica- 
tion instruction 8105. 

[1731] Upon receiving the modification instruction 
81 05 the mobile user terminal decrypts it and examines 
the digital signature. Then, instead of the old electronic 
ticket, the mobile user terminal registers in the ticket list 
1712 the new electronic ticket 13014 that is included in 
the modification instruction 8105. and displays the new 
electronic ticket on the LCD (display the ticket; 8106). 
[1 732] An explanation will now be given for the con- 
tents of the messages that are exchanged by the 
devices during the ticket refund processing. 
[1733] In Fig 82 are shown procedures for exchang- 
ing messages when the ticket refund process ing is per- 
formed by immediate clearing. In Figs. 131 A and 131B. 
133A and 133B. and 134A and 134B are shown the 
contents of messages that are exchanged by the 
devices during the ticket refund processing. In Fig. 83 
are shown procedures for exchanging messages when 
the ticket refund processing is performed by delayed 
clearing. In Figs. 131 A and 131 B. 132A and 132B. 133A 
and 133B. and 134A and 134B are shown the contents 
of messages that are exchanged by the devices. 
[1 734] The ticket refund process is performed when 
the user selects "refund" during in the ticket modification 
process (when the reaction code 13002 of the reaction 
selection message 13007 represents "refund"). There- 
fore, the message exchanging procedures up to the 
reaction selection 13007 are transmitted by tta wr 
processor to the service director processor, and the 
contents of those messages are the same as those 
employed for the ticket modification processing. 
[1735] When the reaction code 13002 indicates 
"refund " the service director processor generates a 
refund request 13107. which is a message requesting 
that the ticket issuer refund the cost of the ticket. The 
ticket issuer processor closes the request 13107, 
addressing it to the ticket issuer, and transmits it as a 
refund request 8205 or 8305 to the ticket issuing sys- 

[1736] As is shown in Fig. 131 A, the digital signature 
of the service provider is provided for the data that con- 
sist of a refund request header 13100. which is header 
information indicating that the message is a refund 
request and describing the data structure; a modifica- 
tion number 13101; a ticket ID 13102 for a ticket for 
which the cost is to be refunded; a request number 
13103- a customer number 13104; a service provider ID 



13105- and an issued time 13106. which indicates the 
date on which the refund request was issued. These 
data are closed and addressed to the ticket issuer, 
thereby providing the refund request 8205 or 8305. 
s [1737] Upon receiving the refund request 8205 or 
8305, the ticket issuing server 1 100 of the ticket issuing 
system updates data in the customer information server 
1 101 the ticket issuing information server 1 1 02 and the 
ticket information server 1 103. cancels the issued ticket. 
w generates a refund commission 8206. which is a mes- 
sage requesting that the service providing system per- 
form the refund process for an electronic ticket, and 
transmits the commission 8206 to the service proving 

is 0738? As is shown in Fig. 131 B. the digital signature 
of the ticket issuer is provided for the data that consists 
of a refund commission header 1 31 1 1 . which is header 
information indicating that the message is the refund 
commission and describing the data structure; a trans- 
20 action number 131 12. which is an arbitrarily generated 
number that uniquely represents the ticket refund 
processing; a refund amount 13113; a clearing | option 
13114- a ticket ID 13115; a request number 13116; a 
ticket issuer ID 131 17; and an issued time 131 18. which 
2S indicates the date when the refund commission was 
issued These data are closed and addressed to the 
service provider, thereby providing the refund commis- 
sion 8206 or 8306. 

n 7391 The ticket issuer processor of the service pro- 
30 viding system decrypts the received refund commission 
8206 or 8306 and examines the digital signature, and 
transmits it to the service director processor. When the 
clearing option 131 14 in the refund commission 131 19 
represents immediate clearing, the service director 
35 processor performs the refund process using immediate 
clearing. When the clearing option 13114 represents 
delayed clearing, the service director processor per- 
forms the ticket refund process using delayed clearing 
[1 740] An explanation will now be given for the ticket 
40 refund process that uses immediate clearing. 

[1 741 ] In Fig. 82. upon receiving a refund commission 
13119 the service director processor generates a 
refund" clearing request 13222, which is a message 
requesting the performance of the refund clearing proc- 
45 ess. The transaction processor processor closes the 
reauest 13222 and addresses it to the transaction proc- 
essor, and transmits it as a refund clearing request 
8207 to the transaction processing system 106. 
11742] As is shown in Fig. 132B. the digital signature 
so of the service provider is provided for the data that con- 
Sste of a refund clearing request header 13212. which 
is header information indicating that the message is the 
refund clearing request 8207 and describing the data 
structure; a user clearing account 13213; a ticket issuer 
55 clearing account 13214. which indicates the clearing 
account of the ticket issuer; a refund amount 13215 , a 
refund option code 13216; a request number 13217, 
which is issued by the mobile user terminal 100; atrans- 
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action number 13218, which is issued by the ticket issu- 
ing system; a validity term 13219, which specifies a 
period during which the refund clearing request 5904 is 
valid; a service provider ID 13220; and an issued time 
13221, which indicates the date when the refund clear- 
mg request 5904 was issued. These data are closed 
and addressed to the transaction processor, thereby 
providing the refund clearing request 8207. 
[1743] Upon receiving the refund clearing request 
8207, the transaction server 1000 of the transaction 
processing system updates data in the subscriber infor- 
mation server 1001, the member store information 
server 102 and the transaction information server 103 
performs the refund clearing process, and generates for 
the service providing system a refund clearing comple- 
tion notification 8208 that is a message indicating that 
the refund clearing has been completed. 
[1 1 744] As is shown in Fig. 1 33A, the digital signature 
of the transaction processor is provided for the data that 
consists of a refund clearing completion notification 
header 13300, which is header information indicating 
that the message is the refund clearing notification 8208 
and describing the data structure; a clearing number 
13301, which is an arbitrarily generated number that 
uniquely represents the clearing process performed by 
the transaction processing system 106; a user clearing 
account 13302; a ticket issuer clearing account 13303- 
a refund amount 13304; a refund option code 13305- a 
request number 13306; a transaction number 13307 
clearing information 13308 for a service provider that is 
accompanied by the digital signature of the transaction 
processor; clearing information 13309 for a ticket issuer 
that is accompanied by the digital signature of the trans- 
action processor; a transaction processor ID 13311 
and an issued time 13312, which indicates the date 
when the refund clearing completion notification was 
issued. These data are closed and addressed to the 
service provider, thereby providing the refund clearing 
completion notification 8208. 

[1745] The transaction processor processor of the 
service providing system 110 decrypts the received 
refund cleanng completion notification 8208 and exam- 
ines the digital signature, and transmits the refund 
clearing completion notification 13313 to the service 
director processor. The service director processor 
employs the refund clearing completion notification 
1 1 331 3 to generate a refund clearing completion notifica- 
tion 13329 for the ticket issuer. The ticket issuer proces- 
sor closes the notification 13329, addresses it to the 
ticket issuer, and transmits it as a refund clearing com- 
pletion notification 8209 to the ticket issuing system 

[1746] As is shown in Fig. 133ft the digital signature 
of the service provider is provided for the data that con- 
sist of a refund clearing completion notification header 
13317, which is header information indicating that the 
message is the refund clearing notification 8209 and 
describing the data structure; a clearing number 1331 8* 



a customer number 13319; a ticket issuer ID 13320- a 
refund amount 13321; a clearing option 13322-' a 
request number 13323; a transaction number 13324- 
clearing information 13325 for a ticket issuer that is 
5 accompanied by the digital signature of the transaction 
processor; a transaction processor ID 13326- a service 
provider ID 13327; and an issued time 13328, which 
indicates the date when the refund clearing completion 
notification was issued. These data are closed and 
10 addressed to the ticket issuer, thereby providing the 
refund clearing completion notification 8209. 
[1 747] The ticket issuing system decrypts the received 
refund clearing completion notification 8209 and exam- 
ines the digital signature, generates a refund receipt 
is 8210. and transmits it to the service providing system. 
[1 748] As is shown in Fig. 1 34A. the digital signature 
of the ticket issuer is provided for the data that consists 
of a refund receipt header 13400, which is header infer- 
mation indicating that the message is the refund receipt 
20 8210 and describing the data structure; a customer 
number 13201; refund information 13402; a refund 
amount 13403; a request number 13404; a transaction 
number 13405; a clearing number 13406;a transaction 
processor ID 13407; a ticket issuer ID 13408- and an 
25 issued time 13409. which indicates the date when the 
refund receipt 8210 was issued. These data are closed 
and addressed to the service provider, thereby provid- 
ing the refund receipt 8210. The refund information 
13402 concerns the refund process performed by the 
30 ticket issuing system, and is accompanied by the digital 
signature of the ticket issuer. 

[1 749] The ticket issuer processor of the service pro- 
viding system 1 10 decrypts the received refund receipt 
8210 and examines the digital signature, and transmits 
35 the refund receipt 1 341 0 to the service director proces- 
sor. The service director processor employs the refund 
receipt 13410 to generate a refund receipt 13421 to be 
transmitted to the user. 

[1 750] When the service director processor has trans- 
40 mitted the refund clearing completion notification 1 3329 
to the ticket issuing system, the service director proces- 
sor erases from the user ticket list 4610 stored in the 
user information server 902 the electronic ticket for 
which the refund was effected. 
45 [1 751] The user processor closes the refund receipt 
13421, addressing it to the user, and transmits it as a 
refund receipt 821 1 to the mobile user terminal 100 via 
digital wireless telephone communication. 
[1 752] As is shown in Fig. 1 34B, the digital signature 
so of the service provider is provided for the data that con- 
sists of a refund receipt header 13414, which is header 
information indicating that the message is the refund 
receipt 8211 and describing the data structure; a user 
ID 13415; a decrypted refund receipt 13416 (13410)- 
55 clearing information 1 341 7 for a user that is accompa- 
nied by the digital signature of the transaction proces- 
sor; refund information 13418; a service provider ID 
13419; and an issued time 13420, which indicates the 
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date when the refund receipt 8211 was issued. These 
data are closed and addressed to the user, thereby pro- 
viding the refund receipt 8211. The refund information 
13418 concerns the electronic ticket refund process 
performed by the service providing system, and is 
accompanied by the digital signature of the service pro- 
vider. 

[1 753] The mobile user terminal decrypts the received 
refund receipt 821 1 and examines the digital signature, 
erases from the check list 1 712 the electronic ticket for 
which the refund was effected, registers the refund 
receipt 13421 in the use list 1715. and displays the 
refund receipt 13421 on the LCD 303 (display the 
refund receipt; 8212). 

[1 754] An explanation will now be given for the tcKet 
refund processing performed with the delayed clearing. 
In Fig. 83. the procedures up to the time the ticket issu- 
ing system transmits a refund commission to the serv- 
ice providing system are the same as are those for the 
immediate clearing. 
[1755] When the delayed clearing is designated in 
accordance with the clearing option 131 1 4. the service 
director processor generates a temporary refund receipt 
13208 that corresponds to a temporary receipt for the 
refund process. The user processor closes the tempo- 
rary refund receipt 13208. addressing it to the user, and 
transmits it as a temporary refund receipt 8307 to the 
mobile user terminal 100 via digital wireless telephone 
communication. . 
[1 756] As is shown in Fig. 132A. the digital signature 
of the service provider is provided for the data that con- 
sist of a temporary refund receipt header 13200. which 
is header information indicating that the message is the 
temporary refund receipt 8307 and describe the data 
structure; a user ID 13201; refund information 13202; a 
refund amount 13203; a request number 13204; a 
transaction number 13205; a service provider ID 13206; 
and an issued time 13207. which indicates the date 
when the temporary refund receipt 8307 was issued. 
These data are closed and addressed to the user, 
thereby providing the temporary refund receipt 8307. 
The refund information 13202 concerns the electronic 
ticket refund process performed by the service proving 
system, and is accompanied by the digital signature of 
the service provider. . 
[1757] The mobile user terminal decrypts the received 
temporary refund receipt 8307 and examines the digital 
signature, erases the electronic ticket that is refund from 
the check list 1712, registers the temporary refund 
receipt 13208 to the use list 1 71 5. and displays the tem- 
porary refund receipt 13208 on the LCD 303 (display 
the refund receipt; 8308). 

[1758] The service director processor thereafter per- 
forms the refund cl earing processing. 
[1 759] First the service director processor generates 
the refund clearing request 13222. which is a message 
requesting the performance of the refund clearing proc- 
ess The transaction processor processor closes the 
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request 13222. addressing it to the transaction proces- 
sor, and transmits it as a refund clearing request 8309 
to the transaction processing system 106. 
[1760] The transaction processing system 106 
decrypts the received refund clearing request 8309 and 
examines the digital signature, and performs the refund 
clearing process. Then, the transaction processing sys- 
tem 106 generates a refund clearing completion notrfi- 
cation 8310. and transmits it to the service providing 

system 110. ^ 
[1761] The transaction processor processor of the 
service providing system 110 decrypts the received 
refund clearing completion notification 8310 and exam- 
ines the digital signature, and transmits a refund dear- 
ing completion notification 1 3313 to the service director 
processor. The service director processor employs the 
refund clearing completion notification 13313 to gener- 
ate the refund clearing completion notification 13329 tor 
the ticket issuer. The ticket issuer processor closes the 
notification 13329. addressing it to the ticket issuer, and 
transmits it to the ticket issuing system 107 as a refund 
clearing completion notification 8311 for the ticket 

issuer. . . 

[1762] The ticket issuing system decrypts the received 
refund clearing completion notification 8311 and exam- 
ines the digital signature, and generates a refund 
receipt 8312 and transmits it to the service providing 
system. 

[1 763] The ticket issuer processor of the service pro- 
viding system 110 decrypts the received refund receipt 
8312 and examines the digital signature, and transmits 
a refund receipt 1341 0 to the service director processor. 
The service director processor employs the refund 
receipt 1 341 0 to generate a refund receipt 1 341 2 for the 

[1 S 764] The generated refund receipt 13412 is not 
immediately transmitted to the mobile user terminal 100 
of the user, but when the mobile user terminal 100 per- 
forms the data updating process, the user processor 
replaces the temporary refund receipt 13208 in the use 
list 1715 with the refund receipt 13421. and transm.ts it 
as a part of the update data 831 3 to the mobile user ter- 
minal 100. , . . 
[1765 ] The data structures of the refund clearing 
request 8309. the refund clearing completion notifica- 
tion 8310, the refund clearing completion notification 
831 1 and the refund receipt 8312 for the delayed clear- 
ing are the same as those used for the refund clearing 
request 8207, the refund clearing completion notifica- 
tion 8208 the refund clearing completion notification 
8209 and the refund receipt 8210 for the immediate 

n766] 9 The refund clearing process with the delayed 
clearing is not necessarily performed immediately after 
the temporary refund receipt is issued, and may be per- 
formed, for example, once a day with another cleanng 

process. . 
[1767] An explanation will now be given for the con- 
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tents of messages that are exchanged by devices in var- 
ious processes for electronic payment card service. 
[1768] First, an explanation will be given for the con- 
tents of messages that are exchanged by devices dur- 
ing the payment card purchase processing. 
[1769] In Fig. 61 are shown the procedures for the 
exchange of messages by devices during the payment 
card purchase processing. In Figs. 96A and 96B ( 97A 
and 97B f 98A and 98B, 99A and 99B f and 100A and 
100B are shown the contents of messages that are 
exchanged by devices during the payment card pur- 
chase processing. 

[1770] First, when a user performs a payment card 
purchase order operation 6100, the mobile user termi- 
nal transmits a payment card purchase order 6101 to 
the service providing system through digital wireless tel- 
ephone communication. 

[1 771 ] As is shown in Fig. 96A, the digital signature of 
a user is provided for data that consists of a payment 
card purchase order header 9600 t which is header 
information identifying the message as the payment 
card purchase order 6101 and describing the data 
structure; a response code 9601, which identifies the 
type of service requested by the user; a card order code 
9602, which identifies an order code for a payment card 
that is entered by the user; a number of payment cards 
9603 that the user has entered; a payment service code 
9604, which identifies a credit card designated by the 
user; a payment value 9605; a payment option code 
9606. which identifies a payment option, such as the 
number of payments designated by the user; a request 
number 9607, which is an arbitrarily generated number 
that uniquely represents the payment card purchase 
processing; a validity term 9608 for the payment card 
purchase order 6101; a user ID 9609; and an issued ; 
time 9610, which is the date on which the payment card 
purchase order 6101 was issued. These data are 
closed and addressed to the service provider, thereby 
providing the payment card purchase order 6101. The 
service code 8901 identifies the purchase order of a a 
payment card to a payment card issuer who is selected 
by the user. 

[1772] Upon receiving the payment card purchase 
order 6101, the user processor of the service providing 
system 1 10 decrypts it and examines the digital signa- 4 
ture, and transmits it to the service manager processor. 
Then, the service manager processor generates a serv- 
ice director processor to form a process group that proc- 
esses a payment card order 961 1 . The service director 
processor refers to the payment card issuer list 5204 a 
and generates a payment card purchase order 9626 for 
the payment card issuer indicated by the service code 
9601. The payment card issuer processor closes the 
payment card order and addresses it to the payment 
card issuer, and transmits the resultant order as a pay- 55 
ment card purchase order 6102 to the payment card 
issuing system 108. 

[1 773] As is shown in Fig. 96B, the digital signature of 



a service providing system is provided for data that con- 
sists of a payment card purchase order header 9615, 
which is header information indicating that the message 
is the payment card purchase order 6102 and describ- 

s ing the data structure; a card order code 9616; a 
number of cards 9617 that are purchased; a payment 
service code 9618; a payment value 9619; a payment 
option code 9620; a request number 9621 ; a customer 
number 9622, which uniquely represents a user for the 

w payment card issuer; a validity term 9623 for the pay- 
ment card purchase order 6102; a service provider ID 
9624; and an issued time 9625, which is the date on 
which the payment card purchase order 6102 was 
issued. These data are closed and addressed to the 

is payment card issuer, thereby providing the payment 
card purchase order 6102. 

[1774] When there was a previous transaction to 
which the user and the payment card issuer were par- 
ties, a customer number that is registered in the cus- 

20 tomer table of the payment card issuer is established as 
the customer number 9622. When there was no previ- 
ous transaction, the service director processor gener- 
ates for the payment card issuer a number that uniquely 
represents the user, establishes it as the customer 

?5 number 9622, and registers that number in the cus- 
tomer table. The customer table is designated by using 
the customer table address 5237 of the payment card 
issuer list 5204. 

[1775] Upon receiving the payment card purchase 
o order 6102, the payment card issuing system 108 
decrypts it and examines the digital signature. The pay- 
ment card issuing server 1200 updates the data in the 
customer information server 1201, the payment card 
issuing information server 1202 and the payment card 
5 information server 1203, generates payment card data 
(9719) for the ordered payment card, and transmits, to 
the service providing system, an electronic payment 
card issuing commission 6103, which constitutes a 
message requesting the process for issuing an elec- 
> tronic payment card that corresponds to the payment 
card and the process for settling the price of the pay- 
ment card. 

[1 776] As is shown in Fig. 97A, the digital signature of 
a payment card issuer is provided for data that consists 
of an electronic payment card issuing commission 
header 9700, which is header information identifying the 
message as the electronic payment card issuing com- 
mission 61 03 and describing the data structure; a trans- 
action number 9701, which is an arbitrarily generated 
number that uniquely identifies a transaction to which a 
user is a party; a sales value 9702, which conveys the 
price of a payment card; a clearing option 9703, which 
indicates which clearing procedures apply; a request 
number 9704; a payment card code 9705, which identi- 
fies the type of electronic payment card that is to be 
issued; a template code 9706, which identifies a tem- 
plate program to be used for an electronic payment card 
that is to be issued; a number of payment cards 9707, 
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which indicates how many payment cards are to be 
issued; payment card data 9708; representative compo- 
nent information 9709; a payment card issuer ID 9710; 
and an issued time 971 1 , which is the date on which the 
electronic payment card issuing commission 6103 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the electronic pay- 
ment card issuing commission 6103. 
[1777] The clearing option 9703 is information by 
which the payment card issuing system designates, to 
the service providing system, the procedures to be used 
for clearing the price of a payment card. The clearing 
process is roughly divided into a spontaneous clearing 
process for issuing an electronic payment card to a user 
after the price of the payment card has been cleared, 
and a delayed clearing process for clearing the price of 
a payment card after an electronic payment card has 
been issued. The clearing option 9703 is used to desig- 
nate either clearing process. 

[1 778] In the delayed clearing process, since an elec- 
tronic payment card is issued to a user before the clear- 
ing process is performed, the user does not have to 
wait. 

[1779] For example, based on a purchase history 
maintained for customers, the payment card issuer can 
designate the delayed clearing process for a customer 
with whom it has had dealings and who is known to be 
trustworthy, and can designate the spontaneous clear- 
ing for a customer with whom it has had no previous 
dealings. 

[1780] The payment card data 9708 is payment card 
information issued by the payment card issuer. A 
number of payment card information items equivalent to 
the number of payment cards 9707 are established as 
the payment card data 9708. For one payment card, the 
digital signature of a payment card issuer is provided for 
data that consist of a card ID 9716, card information 
9717 and a payment card issuer ID 9718, and the pay- 
ment card information is thereby provided. The payment 
card information 9717 is ASCII information describing 
the contents of a payment card. For the payment card 
information 9717, the title of a payment card, the face 
value of the payment card that is issued, the usage con- 
dition, an issuer, and whether it can be transferred, are 
described using a form whereby tag information repre- 
senting information types is additionally provided. 
[1781] The representative component information 
9709 is information that is established as the represent- 
ative component information 2032 for an electronic pay- 
ment card to be generated. Therefore, the 
representative component information 9709 may not be 
set for use. 

[1 782] The payment card issuer processor of the serv- 
ice providing system receives the electronic payment 
card issuing commission 6103, decrypts it and exam- 
ines the digital signature, and transmits it to the service 
director processor. The service director processor per- 
forms the electronic payment card issuing process and 



the payment card price clearing process in accordance 
with the clearing procedures designated by using the 
clearing option 9703. 

[1783] In Fig. 61 is shown the spontaneous clearing 
5 process. The delayed clearing process will be described 
later. 

[1784] For the spontaneous clearing, the service 
director processor generates a clearing request 9824, 
which is a message requesting the clearing of the price 
10 of a payment card. The transaction processor processor 
closes the clearing request 9824 and addresses it to the 
transaction processor, and then transmits it as a clear- 
ing request 6104 to the transaction processing system 

is [1 785] As is shown in Fig. 98B, the digital signature ol 
a service provider is provided for data that consists of a 
clearing request header 9814, which is header informa- 
tion indicating that the message is the clearing request 
6104 and describing the data structure; a user clearing 
20 account 9815. which includes a credit card that corre- 
sponds to the payment service code designated by the 
user; a payment card issuer clearing account 9816, 
which designates the clearing account of a payment 
card issuer; a payment value 9817; a payment option 
25 code 9818; a request number 9819. which is issued by 
the mobile user terminal 100; a transaction number 
9820, which is issued by the payment card issuing sys- 
tem; a validity term 9821, which presents the period 
during which the clearing request 6104 is effective; a 
30 service provider ID 9822; and an issued time 9823. 
which indicates the date on which the clearing request 
6104 was issued. These data are closed and addressed 
to the transaction processor, thereby providing the 
clearing request 61 04. 
35 [1786] The transaction processing system 106 
receives the clearing request 6104, decrypts it and 
examines the digital signature, and performs the clear- 
ing process. Then, the transaction processing system 
106 generates a clearing completion notification 6105, 
40 and transmits it to the service providing system 110. 
[1 787] As is shown in Fig. 99A t the digital signature of 
a transaction processor is provided for data that consist 
of a clearing completion notification header 9900, which 
is header information indicating that the message is the 
45 clearing completion notification 6105 and describing the 
data structure; a clearing number 9901, which is an 
arbitrarily generated number that uniquely represents 
the clearing process performed by the transaction 
processing system 106; a user clearing account 9902; a 
so payment card issuer clearing account 9903; a payment 
value 9904; a payment option code 9905; a request 
number 9906; a transaction number 9907; clearing 
information 9908 for a service provider that is accompa- 
nied by the digital signature of the transaction proces- 
55 sor clearing information 9909 for a payment card issuer 
that is accompanied by the digital signature of the trans- 
action processor; clearing information 9910 for a user 
that is accompanied by the digital signature of the trans- 
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action processor; a transaction processor provider ID 
991 1 ; and an issued time 9912. which indicates the date 
on which the clearing completion notification was 
issued. These data are closed and addressed to the 
service provider, thereby providing the clearing comple- « 
tion notification 61 05. 

[1788] Upon receiving the clearing completion notifi- 
cation 6105. the transaction processor processor of the 
service providing system 110 decrypts it and examines 
the digital signature, and transmits a clearing comple- 10 
.on notification 9913 to the service director processor 
Upon receiving the clearing completion notification 
9913. the service director processor generates a clear- 
ing completion notification 9930 for the payment card 
issuer. The payment card issuer processor closes the is 
clearing completion notification 9930. and transmits it to 
the payment card issuing system 107 as a clearing 
completion notification 6106 for the payment card 
issuer. 

[1789] As is shown in Fig. 99B. the digital signature of 20 
a service provider is provided for data that consist of a 
clearing completion notification header 9917. which is 
header information indicating that the message is the 
clearing completion notification 6106 and describing the 
data structure; a clearing number 9918; a customer ss 
number 9919; a payment card issuer ID 9920- a pay- 
ment service code 9921 ; a payment value 9922; a pay- 
ment option code 9923; a request number 9924- a 
transaction number 9925; clearing information 9926 for 
a payment card issuer that is accompanied by the digital so 
signature of the transaction processor; a transaction 
processor ID 9927; a service provider ID 9928; and an 
issued time 9929. which indicates the date on which the 
clearing completion notification was issued. These data 
are closed and addressed to the payment card issuer as 
thereby providing the clearing completion notification 
6106. 

[1 790] Upon receiving the clearing completion notifi- 
cation 6106. the payment card issuing system decrypts 
it and examines the digital signature, and generates a 40 
receipt 6107 and transmits it to the service providing 
system. r u 

[i 1 791] As is shown in Fig. 1 00A. the digital signature 
of a payment card issuer is provided for data that con- 
sists of a receipt header 10000. which is header infer- 4s 
mation indicating that the message is the receipt 6107 
^ 6SCribin9 the data s1ru <*"e; a customer number 
10001; payment card issuing information 10002- a pay- 
ment service code 10003; a payment value 10004- a 
payment option code 10005; a request number 10006- so 
a transaction number 10007; clearing information 
10008; a transaction processor ID 10009; a payment 
card issuer ID 10010; and an issued time 1001 1 which 
indicates the date on which the receipt 6107 was 
issued. These data are closed and addressed to the ss 
service provider, thereby providing the receipt 6107 
The payment card issuing information 10002 is informa- 
tion concerning the payment card issuing process per- 



formed by the payment card issuing system, and is 
accompanied by the digital signature of the payment 
card issuer. 

[1792] Upon receiving the receipt 6107, the payment 
card issuer processor of the service providing system 
1 10 decrypts it and examines the digital signature, and 
transmits a receipt 1 001 2 to the service director proces- 
sor. The service director processor employs the receipt 
10012 to generate a receipt 10023 for a user. 
[1 793] In addition, the service director processor gen- 
erates a clearing completion notification 9930 for the 
payment card issuing system, generates an electronic 
payment card to be issued to the user, and further gen- 
erates an electronic payment card issuing message 
9227 that includes the electronic payment card that is 
generated. 

[1794] The user processor closes the electronic pay- 
ment card issuing message 9227 and the receipt 10023 
while addressing them to the user, and transmits them 
as an electronic payment card issuing message 6108 
and a receipt 6109 to the mobile user terminal 100 via 
digital wireless communication. 
[1795] As is shown in Fig. 97B, the digital signature of 
a service provider is provided for data that consist of an 
electronic payment card issuing header 9720 which is 
header information indicating that the message is the 
electronic payment card issuing message 6108 and 
describing the data structure; a transaction number 
9721; a request number 9722; the number of payment 
cards 9723; electronic payment card data 9724 that are 
generated; a service provider ID 9725; and an issued 
time 9726, which indicates the date on which the elec- 
tronic payment card issuing message 6108 was issued 
These data are closed and addressed to the user 
thereby providing the electronic payment card issuing 
message 6108. The electronic payment card data 9724 
includes electronic payment cards 9731 equivalent in 
number to the number of payment cards 9723. 
[1 1 796] As is shown in Fig. 1 00B, the digital signature 
of a service provider is provided for data that consists of 
a receipt header 10016. which is header information 
indicating that the message is the receipt 6109 and 
descnbing thedata structure; a user ID 10017; a receipt 
10018 (10012) obtained by decryption; clearing infor- 
mation 10019 for a user that is accompanied by the dig- 
ital signature of a transaction processor; payment card 
issuing information 10020; a service provider ID 10021- 
and an issued time 10022. which indicates the date on 
which the receipt 6109 was issued. These data are 
closed and addressed to the user, thereby providing the 
receipt 6109. The payment card issuing information 
10020 is information for the electronic payment card 
issuing process performed by the service providing sys- 
tem, and is accompanied by the digital signature of the 
service provider. 

[1797] Upon receiving the electronic payment card 
issuing message 6108 and the receipt 6109, the mobile 
user terminal decrypts them and examines the digital 
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signatures, enters in the payment card list 1713 an elec- 
tronic payment card included in the electronic payment 
card issuing message 6108. enters the receipt 10023 in 
the use list 1715. and displays the electronic payment 
card on the LCD 303. 

[1798] The generation of an electronic payment card 
by the service director processor is performed as fol- 
lows. , t 
[1799] First, the service director processor refers to 
the electronic payment card template list 5005 for the 
payment card issuer that is stored in the payment card 
issuer information server. Then, by using the electronic 
payment card template program that is identified by the 
template code 9706 of the electronic payment card issu- 
ing commission 6103. the service director processor 
generates a payment card program for an electronic 
payment card. Specifically, the payment card program 
data 2013 for an electronic payment card are generated 
using the transaction module and the representation 
module, which are described as being located at the 
transaction module address 5019. and the representa- 
tion module address 5020 in the electronic payment 
card template list 5005. and the representative compo- 
nent information 9709 in the electronic payment card 
issuing commission 6103. When the representative 
component information 9709 is not present in the elec- 
tronic payment card issuing commission 6103. the 
default representative component information located at 
the default representative component information 
address 5021 is employed as the information for an 
electronic payment card. 

[1800] Following this and based on the payment card 
information included in the card information 9717. the 
service director processor generates the card status 
2007 and the total remaining value 2008. Whether the 
card status 2007 can be transferred is designated, and 
the face value of the payment card that is issued is set 
as the total remaining value 2007. The service director 
processor generates a new pair consisting of a card sig- 
nature private key and a card signature public key. and 
further generates the payment card program 2001 for 
an electronic payment card by employing the card pri- 
vate key and the accounting machine public key that are 
registered in the electronic payment card management 
information 5400. 

[1801] Furthermore, the service director processor 
generates an electronic payment card by employing the 
obtained card signature public key to generate the cer- 
tificate 2003 for the electronic payment card, and by 
employing the payment card data 9719 in the electronic 
payment card issuing commission 6103 to generate the 
presentation card 2002 for the electronic payment card. 
[1802] The procedures for the delayed clearing will 
now be described. 

[1803] In Fig. 62 are shown the procedures for 
exchanging messages between the devices in the pay- 
ment card purchase process for the delayed clearing. 
The same process is performed as is used for the spon- 



taneous clearing until the payment card issuing system 
transmits the electronic payment card issuing commis- 
sion to the service providing system. 
[1804] When the delayed clearing is designated by the 
5 clearing option 9703. the service director processor 
generates an electronic payment card to be issued to 
the user, and also generates the electronic payment 
card issuing message 9727. which includes the gener- 
ated electronic payment card, and a temporary receipt 
10 message 9810. which corresponds to a temporary 
receipt. The generation of the electronic payment card 
is performed in the same manner as that used tor the 
spontaneous clearing. . 
T18051 The user processor closes the electronic pay- 
, 5 ment card issuing message 9727 and the temporary 
receipt 9810 and addresses them to the user, and trans- 
mits these messages as an electronic payment card 
issuing message 6204 and a temporary receipt 6205 to 
the mobile user terminal 100 via digital wireless tele- 
20 phone communication. _ 

[1806] As is shown in Fig. 98A. the digital signature of 
a service provider is provided for data that consists of a 
temporary receipt header 9800. which is header infor- 
mation indicating that the message is the temporary 
25 receipt 6205 and describing the data structure; a user 
ID 9801 ■ payment card issuing information 9802; a pay- 
ment service code 9803; a payment value 9804; a i pay- 
ment option code 9805; a request number 9806; a 
transaction number 9807; a service provider ID 9808 
30 and an issued time 9809. which indicates the date on 
which the temporary receipt 6205 was issued These 
data are closed and addressed to the user, thereby pro- 
viding the temporary receipt 6205. The payment card 
issuing information 9802 is information concerning the 
as electronic payment card issuing process that is per- 
formed by the service providing system, and is accom- 
nanied by the digital signature of the service provider. 
[1 807] The data structure of the electronic payment 
card issuing message 6204 is the same as that used for 
40 the electronic payment card issuing message 6108. 
[1808] Upon receiving the electronic payment card 
issuing message 6204 and the temporary receipt 6205 
the mobile user terminal decrypts them and examines 
thedigital signatures, enters an electronic payment card 
45 included in the electronic payment card issumg mes- 
sage 6204 in the payment card list 1713. enters the 
temporary receipt 9810 in the use list 1715. and dis- 
plays the electronic payment card on the LCD 303. 
[1809] Following this, the service director processor 
50 performs the clearing process for the price of the pay- 
ment card. First, the service director processor gener- 
ates a clearing request 9824, which is a message 
requesting the performance of the clearing process for 
the price of the payment card. The transaction proces- 
55 sor closes the clearing request 9824 and addresses it to 
the transaction processor, and transmits it as a clearing 
request 6207 to the transaction processing system 106. 
[1810] Upon receiving the clearing request 6207, the 
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transaction processing system 106 decrypts it and 
examines the digital signature, and performs the clear- 
ing process. The transaction processing system 106 
generates a clearing completion notification 6208 and 
transmits it to the service providing system 1 10. 5 
[181 1 ] Upon receiving the clearing completion notifi- 
cation 6208, the transaction processor processor of the 
service providing system 110 decrypts it and examines 
the digital signature, and transmits a clearing comple- 
tion notification 9913 to the service director processor. 10 
The service director processor employs the received 
clearing completion notification 9913 to generate a 
clearing completion notification 9930 for the payment 
card issuer. And the payment card issuer processor 
closes the clearing completion notification 9930 and is 
transmits it to the payment card issuing system 108 as 
a clearing completion notification 6209 for the payment 
card issuer. 

[1812] The payment card issuing system decrypts the 
received clearing completion notification 6209 and 20 
examines the digital signature, and generates a receipt 
6210 and transmits it to the service providing system. 
[181 3] The payment card issuer processor of the serv- 
ice providing system decrypts the received receipt 6210 
and examines the digital signature, and transmits a 25 
receipt 10012 to the service director processor. The 
service director processor employs the receipt 10012 to 
generate a receipt 10023 for a user. 
[1814] The receipt 10023 that is generated is not 
immediately transmitted to the mobile user terminal 1 00 so 
of the user. When the mobile user terminal has per- 
formed the data updating process, the user processor 
replaces the temporary receipt 9810 in the use list 1 715 
with the receipt 10023, and transmits the receipt 10023 
as one part of the update data 621 1 to the mobile user 35 
terminal 100. 

[1815] The data structures of the clearing request 
6207. the clearing completion notification 6208, the 
clearing completion notification 6209 and the receipt 
6210 for the delayed clearing are the same as those 40 
provided for the clearing request 6104, the clearing 
completion notification 6105, the clearing completion 
notification 6106 and the receipt 6107 for the spontane- 
ous clearing. 

[1816] The delayed clearing process need not be per- 45 
formed immediately after the electronic payment card is 
issued, and together with the other clearing processes, 
may be performed, for example, once a day. 
[1817] An explanation will now be given for the con- 
tents of messages that are exchanged by the mobile so 
user terminal 100 and the service providing system 1 10 
during the payment card registration processing. 
[1818] In Fig. 65B are shown the procedures for 
exchanging messages between devices in the payment 
card registration processing, and in Figs. 107A and ss 
107B are shown the contents of messages that are 
exchanged by the devices in the payment card registra- 
tion processing. 



[1819] First, when the user performs an electronic 
payment card registration operation 6504, the mobile 
user terminal generates a payment card registration 
request 6505 and transmits it to the service providing 
system via digital wireless telephone communication. 
[1820] As is shown in Fig. 1 07A. the digital signature 
of a user is provided for data that consists of a payment 
card registration request header 10700, which is header 
information indicating that the message is the payment 
card registration request 6505 and describing the data 
structure; a card ID 10701 of a payment card to be reg- 
istered; a user ID 10702; and an issued time 10703, 
which indicates the date on which the payment card 
registration request 6505 was issued. These data are 
closed and addressed to the service provider, thereby 
providing the payment card registration request 6505. 
[1821] The user processor of the service providing 
system decrypts the received payment card registration 
request 6505 and examines the digital signature, and 
transmits the request 6505 to the service manager 
processor. The service manager processor generates a 
service director processor to form a process group that 
processes a payment card registration request 10704. 
The service director processor ascertains that the elec- 
tronic payment card indicated by the card ID 10701 is 
registered in the payment card list 4611 for the user in 
the user information server 902, and registers that elec- 
tronic payment card in the registered card list 5402 for 
electronic payment cards of the service director infor- 
mation server 901. At this time, the service director 
processor newly generates a card signature private key 
and a card signature public key pair. Further, the service 
director processor generates a registered card certifi- 
cate using the card signature public key, and registers it 
in the registered card list 5402. The service director 
processor then generates a card certificate issuing 
message 10713 using the card signature private key 
and the registered card certificate that has been gener- 
ated. The user processor closes the card certificate 
issuing message 10713 and addresses it to the user, 
and transmits it as a payment card certificate issuing 
message 6506 to the mobile user terminal via digital 
wireless telephone communication, 
[1822] As is shown in Fig. 1 07B, the digital signature 
of a service provider is provided for data that consists of 
a card certificate issuing header 10708, which is header 
information indicating that the message is the payment 
card certificate issuing message 6506 and describing 
the data structure; a card digital signature private key 
10709; a registered card certificate 10710; a service 
provider ID 10711, and an issued time 10712, which 
indicates the date on which the payment card certificate 
issuing message 6506 was issued. These data are 
closed and addressed to the user, thereby providing the 
payment card certificate issuing message 6506. 
[1823] The mobile user terminal 100 decrypts the 
received payment card certificate issuing message 
6506 and examines the digital signature, replaces the 
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card signature private key and the card certificate of an 
electronic payment card with the card signature private 
key 10709 and the registered card certificate 10710, 
both of which are included in the payment card certifi- 
cate issuing message 6506, changes the registration 
state in the card status to the post-registration state, 
and displays on the LCD the electronic payment card 
that has been registered (display a payment card that is 
registered; 6507). 

[1824] An explanation will now be given for the con- 
tents of messages that are exchanged by the service 
providing system 110 and the merchant terminal 102, 
the merchant terminal 103, or the accounting machine 
3555 (automatic vending machine 104) during the pay- 
ment card setup processing. 

[1 825] The payment card setup processing is not per- 
formed in accordance with a special processing 
sequence, but is performed in the data updating proc- 
ess during which the service providing system updates 
the data in the merchant terminal 102 (or the merchant 
terminal 103 or the accounting machine 3555). 
[1 826] Therefore, for the payment card setup process, 
the procedures for the exchange of messages by the 
service providing system and the merchant terminal 
102 (or the merchant terminal 103 or the accounting 
machine 3555), and the contents (data structures) of 
the messages to be exchanged are the same as those 
used for the above described data updating processing 
(Figs. 57 and 88). 

[1827] It should be noted, however, that the payment 
card setup process is not performed each time the data 
updating process is performed, but when the payment 
card list 4609 for the merchant stored in the merchant 
information server 903 is updated by the service direc- 
tor processor. 

[1828] When the payment card list 4609 is updated, 
the merchant processor includes updated data in the 
payment card list 4609 for the compressed update data 
8828 in the update data 5705, and transmits the result- 
ant data as update data 5705 to the merchant terminal 
102 (or the merchant terminal 103 or the accounting 
machine 3555). 

[1 829] Upon receiving the update data 5705, the mer- 
chant terminal 102 (the merchant terminal 103 or the 
accounting machine 3555) decompresses the update 
data 8828. and updates the data in the RAM and on the 
hard disk. At this time, the payment card list 281 1 (321 1 
or 3608) in the merchant terminal 102 (or the merchant 
terminal 103 or the accounting machine 3555) is 
updated, and an electronic payment card that is han- 
dled by the merchant terminal 102 (or the merchant ter- 
minal 103 or the accounting machine 3555) is updated. 
[1830] An explanation will now be given for the con- 
tents of messages that are exchanged by between the 
mobile ussr terminal 100 and the merchant terminal 
102, the merchant terminal 103, or the accounting 
machine 3555 (automatic vending machine 104) during 
the payment card clearing processing. 



[1831] In Fig. 68 are shown procedures for the 
exchange of messages by the mobile user terminal 1 00 
and the merchant terminal 102 or 103 during the pay- 
ment card clearing processing, and in Fig. 69 are shown 
5 procedures for the exchange of by the mobile user ter- 
minal 100 and the accounting machine 3555. In Figs. 
112A and 112B and Figs. 113A and 113B are shown 
the contents of messages that are exchanged by the 
devices during the payment card clearing processing. 
10 For the payment card clearing processing, the same 
procedures are employed for the exchange of mes- 
sages by the mobile user terminal 100 and the mer- 
chant terminal 102, the merchant terminal 103 or the 
accounting machine 3555, and the same contents (data 
15 structures) are included in the messages to be 
exchanged. 

[1832] First, when a user performs a payment offer 
operation 6804 or 6906, the mobile user terminal 
employs a payment card that is to be used for payment 
20 and an arbitrarily generated test pattern and produces a 
payment offer message 6805 or 6907, which is a mes- 
sage for offering the merchant the payment of a price. 
The mobile user terminal transmits the message 6805 
or 6907 to the merchant terminal 102 (or the merchant 
25 terminal 1 03 or the accounting machine 3555) via infra- 
red communication. 

[1833] As is shown in Fig. 112A, the payment offer 
message 6805 or 6907 consists of a payment offer 
header 11200, which is header information indicating 
30 that the message is the payment offer message 6805 or 
6907 and describes the data structure; a service code 
11201, which identifies the request for payment using 
an electronic payment card; a request number 11202, 
which is an arbitrarily generated number that uniquely 
35 represents the payment card clearing process; an 
amount of payment 1 1 203 that is entered by the user; a 
presentation card 11203 for presenting an electronic 
payment card to be used for the payment; a card certif i- 
cate 11205; a current card status 11206 for an elec- 
40 tronic payment card to be used for the payment; a total 
remaining value 1 1207; a card ID 1 1208; an issued time 
1 1209, which indicates the date on which the payment 
offer message 6805 or 6907 was issued; and an 
accounting machine test pattern 11211, which is an 
45 arbitrarily generated test pattern. The digital signature is 
provided, using the card signature private key of an 
electronic payment card, for the card status 1 1206 the 
total remaining value 1 1207, the card ID 1 1208 and the 
issued time 11209. The accounting machine test pat- 
50 tern 1 121 1 is encrypted using the accounting machine 
public key. 

[1834] The presentation card 1 1204, the card certifi- 
cate 11205 the card status 11206. the total remaining 
value 11207, the card ID 11208 and the issued date 
55 11209 specify the contents of the electronic payment 
card for the merchant terminal 102 (or the merchant ter- 
minal 103 or the accounting machine 3555), and the 
accounting machine test pattern 1 121 1 is a test pattern 
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for authorizing the merchant terminal 102 (or the mer- 
chant terminal 103 or the accounting machine 3555). 
[1835] Upon receiving the payment offer 6805 or 
6907, first, the merchant terminal 102 (or the merchant 
terminal 103 or the accounting machine 3555} refers to 5 
the payment card list 281 1 (321 1 or 3608) and activates 
a payment card clearing module that corresponds to the 
card code (included in a presentation card) for the elec- 
tronic payment card that is presented. Then, the mer- 
chant terminal 1 02 (or the merchant terminal 1 03 or the w 
accounting machine 3555) examines the validity of the 
contents of the payment offer 6805 or 6907, generates 
a payment offer response 6806 or 6908, which is a 
response message for the payment offer, and transmits 
it to the mobile user terminal via infrared communica- is 
tioa When the electronic payment card that is pre- 
sented is not registered in the payment card list 2811 
(321 1 or 3608), the payment offer response 6806 or 
6907 is transmitted, which indicates that the pertinent 
electronic payment card is not available. 2 o 
[1836] In the verification processing for determining 
the validity of the payment offer message 6805 or 6907, 
first, the merchant terminal 102 (or the merchant termi- 
nal 103 or the accounting machine 3555) verifies that 
for the sale the amount of payment 1 1203 designated 25 
by the user is adequate. The merchant terminal 102 
employs the fact that the card certificate 1 1205 is a reg- 
istered card certificate, and examines the card status 
1 1 206 and the total remaining value 1 1 207 to determine 
whether the electronic payment card is valid and can be 30 
used as a payment card for the payment. Then, the mer- 
chant terminal 102 examines the presentation card 
1 1204, the digital signature of the service provider that 
is provided for the card certificate 1 1205, and the valid- 
ity term. Further, the merchant terminal employs the 35 
card signature public key of the card certificate 1 1 205 to 
examine the digital signature of the electronic payment 
card that is provided for the card status 1 1206, the total 
remaining value 11207, the card ID 11208 and the 
issued time 11209. In this fashion, the validity of the 40 
payment offer 6805 or 6907 is verified. 
[1837] In the generation of the payment offer response 
6806 or 6908, the merchant terminal 102 (or the mer- 
chant terminal 103 or the accounting machine 3555) 
decrypts the accounting machine test pattern 11211 45 
using the accounting machine private key, and employs 
the card public key to encrypt the card test pattern 
1 121 1 that is arbitrarily generated. 
[1838] As is shown in Fig. 1 12B, the digital signature 
of a merchant is provided for the data that consists of a so 
payment offer response header 1 1213, which is header 
information indicating that the message is the payment 
offer response 6806 or 6908 and describing the data 
structure; a transaction number 11214; a response 
message 11215; a request number 11216; a card ID ss 
11217; an instruction code 11218; an amount of sales 
11219, which indicates the price that is charged or the 
cost of the service that is calculated by the merchant 



terminal 102 (or the merchant terminal 103 or the 
accounting machine 3555); an accounting machine test 
pattern 11220, which is decrypted; a card test pattern 
1 1221, which is an arbitrarily generated test pattern; an 
accounting machine ID 11223; a merchant ID 11224; 
and an issued time 11225, which indicates the date on 
which the payment offer response 6805 or 6908 was 
issued. In this fashion, the payment offer response 6806 
or 6908 is provided. The card test pattern 11221 is 
encrypted using the card public key. 
[1839] The transaction number 11214 is a number 
that is arbitrarily generated, by the merchant terminal 
102 (or the merchant terminal 103 or the accounting 
machine 3555), and that uniquely represents the pay- 
ment card clearing process. When, as a result of the 
examination of the payment offer 6805 or 6907, the pay- 
ment card clearing process can not be performed (the 
amount of the payment entered by the user is not suffi- 
cient, or when an electronic payment card is one that 
can not be handled by the pertinent merchant terminal 
102 (or the merchant terminal 103 or the accounting 
machine 3555)), a value of 0 is set When the payment 
card clearing process can be performed, a value other 
than 0 is set. 

[1840] The response message 1 1215 is text informa- 
tion constituting the message transmitted by the mer- 
chant to the user. When the merchant terminal 102 (or 
the merchant terminal 103 or the accounting machine 
3555) can not handle an electronic payment card that 
has been presented (transaction number = 0), data to 
that effect is included in the response message. The 
response message is prepared optionally, and may not 
be prepared. 

[1841] The instruction code 1 1218 is command code 
information for an electronic payment card, and is used 
when a value equivalent to the amount of sales 1 1 219 is 
subtracted from the total remaining value held by the 
electronic payment card. The instruction code is varied 
by combining the electronic payment card transaction 
module and the payment card clearing module. 
[1842] When the mobile user terminal receives the 
payment offer response 6806 or 6908, first, for verifica- 
tion of to verify the merchant terminal 102 (or the mer- 
chant terminal 103 or the accounting machine 3555), it 
compares the accounting machine test pattern 11211 
with the accounting machine test pattern 11220 
included in the payment offer response 6806 or 6908. 
The mobile user terminal ascertains whether the 
amount of sales 1219 is equal to or smaller than the 
amount of payment 1 1 203 entered by the user, and sub- 
tracts the amount of sales 1 1219 from the total remain- 
ing value held by the electronic payment card in 
accordance with the instruction code 11218. Then, the 
mobile user terminal decrypts the card test patten using 
the card private key, and generates a micro-check mes- 
sage 6807 or 6909, which corresponds to a check that 
has as its face value the amount of the sale. The check 
is transmitted via infrared communication to the mer- 
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chant terminal 102 (or to the merchant terminal 103 or 
the accounting machine 3555). 
[1843] As is shown in Fig. 11 3 A, the digital signature 
using the card signature private key and the digital sig- 
nature of a user are provided for the data that consists 
of a micro-check header 1 1300, which is header infor- 
mation indicating that the message is the micro check 
6807 or 6909 and describing the data structure; a 
micro-check issuing number 1 1301 , which indicates the 
order of the payment card clearing process; a card test 
pattern 11302, which is decrypted; an amount of pay- 
ment 1 1303, which indicates the obtained value that is 
subtracted from the total remaining value; a card status 
1 1 304; a total remaining value 1 1 305 available after the 
subtraction; an accounting machine ID 11306; a mer- 
chant ID 1 1307; a request number 1 1308; a transaction 
number 11309; a card code 11310; a card ID 11311; 
and an issued time 11312, which indicates the date on 
which the micro-check 6807 or 6909 was issued. In this 
fashion, the micro-check 6807 or 6909 is provided. 
[1844] Upon receiving the micro-check 6807 or 6909, 
first, the merchant terminal 102 (or the merchant termi- 
nal 103 or the accounting machine 3555) authorizes the 
electronic payment card by comparing the card test pat- 
tern 11221 with the card test pattern 11302 that is 
included in the micro-check 6807 or 6909, examines the 
validity of the contents of the micro-check 6807 or 6909, 
and generates a receipt 6808 or 6910 and transmits it to 
the mobile user terminal via infrared communication. 
[1 845] In the verification process for the validity of the 
micro-check 6807 or 6909, the merchant terminal 102 
(or the merchant terminal 103 or the accounting 
machine 3555) determines whether the amount of pay- 
ment 11303 represented by the micro-check 6807 or 
6909 is adequate for the value of the sale. Also, the mer- 
chant terminal 102 (or the merchant terminal 103 or the 
accounting machine 3555) determines whether the 
value obtained by subtracting the total remaining value 
11305 from the total remaining value 11207, which rep- 
resents the payment offer, is equal to the amount of pay- 
ment 11303 represented by the micro-check. Finally, 
the merchant terminal 102 examines the digital signa- 
ture of the electronic payment card accompanying the 
micro-check 6807 or 6909. 

[1 846] As is shown in Fig. 1 1 3B, the digital signature 
of a merchant is provided for the data that consists of a 
receipt header 1 1314, which is header information indi- 
cating that the message is the receipt 6808 or 691 0 and 
describing the data structure; sales information 11315; 
a card ID 1 1316; a total receipt value 1 131 7. which indi- 
cates the same value as the amount of payment 1 1303 
represented by the micro-check that is received by the 
merchant; a request number 11318; a transaction 
number 11319; a micro-check issuing number 11320; 
an accounting machine ID 1 1321 ; a merchant ID 11322; 
and an issued time 1 1323, which indicates the date on 
which the receipt 6808 or 6910 was issued. In this fash- 
ion, the receipt 6808 or 6910 is provided. 



[1847] The sales information 11315 is text information 
constituting the contents of a transaction acquired dur- 
ing the payment card clearing process, and corre- 
sponds to the specifications for the products that are 
5 traded or for the service that is provided, or for a state- 
ment of account. 

[1848] Upon receiving the receipt 6808 or 6910, the 
mobile user terminal verifies that the total receipt value 
1 131 7 is equal to the amount of payment 1 1303 of rep- 
10 resented by the micro-check, and increments the micro- 
check issuing number. The mobile user terminal then 
registers the receipt 6808 or 6910 as usage information 
in the use list 1715, and displays the receipt 6808 or 
6910 on the LCD (display the receipt; 6810 or 691 1). 
15 [1 849] When the merchant terminal 1 02 (or the mer- 
chant terminal 103 or the accounting machine 3555) 
has transmitted the receipt 6808 or 6910, it registers, in 
the transaction list 2812 (3212 or 3609), the micro- 
check 6807 or 6909 and the receipt 6808 or 6910 as 
20 history information for the payment card clearing proc- 
ess. 

[1850] The merchant terminal 102 or the merchant 
terminal 1 03 displays, on the LCD, a message that indi- 
cates the termination of the payment card clearing proc- 
25 ess (display the clearing completion; 6809). and the 
product is delivered by the merchant to the user (deliver 
the product; 6811). Thereafter, the accounting machine 
3555 (automatic vending machine 104) discharges the 
product to the discharge port 703. 
30 [1851] When the mobile user terminal receives the 
payment offer, and the amount of payment 11203 
entered by the user is greater than the amount of sales 
1 121 9, the dialogue message for asking the user for the 
value of the payment is displayed on the LCD 303. 
35 When the user again enters a payment value that is 
greater than the amount of sales 11219, a micro-check 
having the entered value as the payment value 11303 
may be issued. In this case, a value that corresponds to 
the difference between the amount of payment 11303 
40 and the amount of sales 1 1219 can be paid as a com- 
mission to the merchant. 

[1852] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the payment card reference processing. 
45 [1853] In Fig. 72 are shown procedures for the 
exchange of messages by the devices during the pay- 
ment card reference processing, and in Figs. 88A to 
88D and Fig. 1 16B are shown the contents of messages 
that are exchanged during the payment card reference 
so processing. The payment card reference processing is 
not performed in accordance with a special processing 
sequence, but is performed in the data updating proc- 
ess during which the service providing system updates 
the data in the merchant terminal 102 (or the merchant 
55 terminal 1 03 or the accounting machine 3555). 

[1854] Therefore, for the payment card reference 
process, the procedures for the exchange of messages 
by the merchant terminal 102 (or the merchant terminal 
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103 or the accounting machine 3555) and the service 
providing system, and the contents (data structures) of 
the messages to be exchanged are the same as those 
employed for the above described data updating 
processing. 5 

[1855] Compressed upload data 8818 in the upload 
data 5702 include a micro-check that is newly regis- 
tered in the transaction list 2510 during the payment 
card clearing process conducted during the period 
extending from the previous performance of the data rc 
updating process to the current performance of the data 
updating process. 

[1856] During the data updating processing, the mer- 
chant processor transmits, to the service manager proc- 
essor, a message requesting the reference process be is 
performed for the micro-check that is uploaded from the 
merchant terminal 102 (or the merchant terminal 103 or 
the accounting machine 3555). The service manager 
processor generates a service director processor to 
form a process group for examining the validity of the 20 
micro-check 

[1857] First, the service director processor determines 
whether the accounting machine ID 1 1 306 and the mer- 
chant ID 1 1307 in the micro-check match the account- 
ing machine ID 5215 of the merchant and the merchant 25 
ID 521 4. Then, the service director processor examines 
the registered card list 5402 in the service director infor- 
mation server 901 to verify that the electronic payment 
card for which the micro-check was issued is registered. 
The service director processor employs the user public 30 
key 5419 to examine the digital signature of the user 
that accompanies the micro-check, and employs the 
registered card certificate to examine the digital signa- 
ture for the payment card that accompanies the micro- 
check In addition, the service director processor 35 
employs the micro-check issuing number when examin- 
ing the matching of the amount of payment with the total 
remaining value, and transmits the result of the exami- 
nation to the merchant processor. As a result, the micro- 
check is registered in the micro-check list 40 
[1858] The merchant processor enters the received 
payment card reference results in the compressed 
update data 8828 in the update data 5705, and trans- 
mits the data 5705 to the merchant terminal 1 02 (or the 
merchant terminal 1 03) . 45 
[1859] When an error occurs in the process for verify- 
ing the validity of the micro-check the service director 
processor transmits a message indicating that an error 
occurred in the management system 908. 
[1860] Upon receiving the update data 5705. the mer- so 
chant terminal 102 (or the merchant terminal 103) 
decompresses the update data 8828 and updates the 
data in the RAM and on the hard disk. At this time, the 
payment card reference results are registered in the 
authorization report list 2813 (3213) of the merchant ter- 55 
minal 102 (the merchant terminal 103). 
[1861] If the firm represented by the merchant differs 
from that represented by the payment card issuer, and a 



payment for the merchant who handles the payment 
card is made by the payment card issuer, or if the usage 
of the payment card is periodically reported to the pay- 
ment card issuer in accordance with the terms of a con- 
tract, in accordance with the micro-check that is newly 
registered in the micro-check list, the service director 
processor generates weekly, for example, a usage con- 
dition notification 1 1616, which is a message for notify- 
ing the payment card issuer of the payment card usage 
condition. The payment card issuer processor closes 
the notification 1 1616 and addresses it to the payment 
card issuer, and transmits it as a usage report 7200 to 
the payment card issuing system 108. 
[1862] As is shown in Fig. 1 16B, the digital signature 
of a service provider is provided for the data that con- 
sists of a usage report header 11610, which is header 
information indicating that the message is the usage 
report 7200 and describing the data structure; a card ID 
and payment value list 11611 of payment cards that are 
employed; the merchant name 1 1 61 2 and the merchant 
ID 1 1613 of a merchant that handles the payment card; 
a service provider ID 11614; and an issued time 1 1615, 
which indicates the date on which the usage report 
7200 was issued. These data are closed and addressed 
to the payment card issuer, thereby providing the usage 
report 7200. 

[1863] Upon receiving the usage report 7200, the pay- 
ment card issuing system 108 decrypts it and examines 
the digital signature, and performs such processing as 
making a payment to the merchant. 
[1864] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the payment card transfer processing. 
[1865] In Fig. 75 are shown procedures for the 
exchange of messages by the devices during the pay- 
ment card transfer processing, and in Figs. 120A and 
120B, 121 A and 121 B, and 122A and 122B are shown 
the contents of messages that are exchanged during 
the payment card transfer processing. 
[1866] The payment card transfer process can be per- 
formed when the card status 2007 of the electronic pay- 
ment card indicates the transfer enabled state, which is 
designated by the payment card issuer when issuing a 
payment card. 

[1867] In Fig. 75 is shown a case where user A trans- 
fers an electronic payment card to user B. The proce- 
dures for the exchange of messages by the devices 
belonging to users A and B are the same for infrared 
communication as they are for digital wireless communi- 
cation. The data structures of messages are also the 
same. 

[1868] In Fig. 75, first, when user A performs a pay- 
ment card transfer process 7500, the mobile user termi- 
nal of user A transmits a payment card transfer offer 
7501 , which is a message offering to transfer an elec- 
tronic payment card, to the mobile user terminal of user 
B. When at this time the mobile user terminals of user A 
and user B are connected, communication between 
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user A and user B is performed via digital wireless tele- 
phone. When the mobile user terminals are not con- 
nected, infrared communication is employed. 
[1869] As is shown in Fig. 120A, the digital signature 
of user A is provided for the data consisting of a card 
transfer offer header 12000, which is header information 
indicating that the message is the card transfer offer 
7501 and describing the data structure; a transfer offer 
number 12001 , which is an arbitrarily generated number 
that uniquely represents the payment card transfer 
process; a presentation card 12002 and a card certifi- 
cate 12003 for an electronic payment card to be trans- 
ferred; a card status 12004; a total remaining value 
12005; a card ID 12006; an issued time 12007, which 
indicates the date on which the card transfer offer 7501 
was issued; and a user public key certificate 12009. In 
this fashion, the card transfer offer 7501 is provided. 
The digital signature of the electronic payment card is 
provided, using the card signature private key, for the 
card status 12004, the variable card information 12005, 
the card ID 12006 and the issued time 12007. 
[1870] The digital signature of the service provider is 
provided for the data that consist of a user public key 
header 12010; the user public key 12011 of user A; a 
public key certificate ID 12012, which is ID information 
for the public key certificate; a certificate validity term 
12013; a service provider ID 12014; and a certificate 
issued time 12015. In this fashion, the user public key 
certificate 12009 is provided. 

[1 871 ] Upon receiving the card transfer offer 7501 , the 
mobile user terminal of user B examines the presenta- 
tion card 12002, the card certified 12003, and the digital 
signature of the service provider and the validity term of 
the public key certificate 12009. Then, the mobile user 
terminal examines the digital signature of the electronic 
payment card that is provided for the card status 1 2004, 
the total remaining value 12005, the card ID 12006 and 
the issued time 12007, and the digital signature of user 
A accompanying the card transfer offer 7501, and veri- 
fies the contents of the card transfer offer 7501. In 
accordance with the presentation card 12002. the card 
status 12004 and the total remaining value 12005, the 
mobile user terminal then displays, on the LCD, the con- 
tents of the electronic payment card that is to be trans- 
ferred (display the transfer offer; 7502). 
[1 872] When user B performs a transfer offer accept- 
ance operation 7503, the mobile user terminal of user B 
transmits, to the mobile user terminal of user A, a card 
transfer offer response 7504, which is a response mes- 
sage for the card transfer offer 7501 . 
[1873] As is shown in Fig. 120B, the digital signature 
of user B is provided for the data that consist of a card 
transfer offer response header 12016, which is header 
information indicating that the message is the card 
transfer offer response 7504 and describing the data 
structure; an acceptance number 12017; a transfer offer 
number 12018; a card ID 12019; an issued time 12020, 
which indicates the date on which the card transfer offer 



response 7504 was issued; and a user public key certif- 
icate 12021. In this fashion, the card transfer offer 
response 7504 is provided. 

[1 874] The user public key certificate 1 2021 is a public 
> key certificate for user B. To provide this certificate 
12021, the digital signature of the service provider is 
provided for the data that consist of a user public key 
certificate header 12022; a user public key 12023 for 
user B; a public key certificate ID 12024, which is ID 
10 information for the public key certificate; a certificate 
validity term 12025; a service provider ID 12026; and a 
certificate issued time 12027. 

[1875] The acceptance number 12017 is arbitrarily 
generated, by the mobile user terminal of user B, as a 

is number that uniquely represents the payment card 
transfer processing. With this number, the mobile user 
terminal of user A is notified as to whether user B has 
accepted the card transfer offer 7501. When user B 
does not accept the card transfer offer 7501 , a value of 

20 0 is set as the acceptance number 1 201 7. When user B 
accepts the card transfer offer 7501 , a value other than 
0 is set. 

[1 876] Upon receiving the card transfer offer response 
7504, the mobile user terminal of user A displays, on the 
25 LCD, the contents of the card transfer offer response 
7504 (display the transfer offer response; 7505). When 
the card transfer offer 7501 is accepted (acceptance 
number 12017 * 0), the mobile user terminal of user A 
examines the digital signature of the service provider of 

30 the user public key certificate 12021 and the validity 
term. The mobile user terminal generates a card trans- 
fer certificate 7506, which is a message that corre- 
sponds to a transfer certificate for an electronic payment 
card to user B, and transmits it to the mobile user termi- 

35 nal of user B. 

[1877] As is shown in Fig. 121 A, the digital signature 
of the electronic payment and the digital signature of 
user A are provided for the data that consist of a card 
transfer certificate header 12100, which is header infor- 

40 mation indicating that the message is the card transfer 
certificate 7506 and describing the data structure; a 
presentation card 12101 for an electronic payment card 
to be transferred; a card status 12102; a total remaining 
value 12103; a transfer offer number 12104; an accept- 

45 ance number 12105; a public key certificate ID 12106 
for the user public key certificate of user B; a public key 
certificate ID 12107 for the user public key certificate of 
user A; a card ID 12108; and an issued time 12109. 
which indicates the date on which the card transfer cer- 

50 tificate 7506 was issued. These data are closed and 
addressed to user B, thereby providing the card transfer 
certificate 7506. 

[1878] Upon receiving the card transfer certificate 
7506, the mobile user terminal of user B decrypts it and 
55 examines the digital signature of user A and the one 
accompanying the electronic payment card. Further, the 
mobile user terminal compares the card ID presented 
by the card transfer offer 7501 with the card ID 12108. 
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and compares the public key certificate IDs 12106 and 
12107 with the public key certificates of users B and A 
to verify the contents of the card transfer certificate 
7506. The mobile user terminal then generates a card 
transfer receipt 7507, which is a message indicating the s 
electronic payment card has been received, and trans- 
mits the receipt 7507 to the mobile user terminal of user 
A. 

[1879] As is shown in Fig. 121B, the digital signature 
of user B is provided for the data that consist of a card 10 
transfer receipt header 12115, which is header informa- 
tion indicating that the message is the card transfer 
receipt 7507 and describing the data structure; a card 
ID 121 16; a transfer offer number 121 1 7; an acceptance 
number 12118; a public key certificate ID 12119 for the 15 
user public key certificate of user A; a public key certifi- 
cate ID 12120 for the user public key certificate of user 
B; and an issued time 12121, which indicates the date 
on which the card transfer receipt 7507 was issued. 
These data are closed and addressed to user A, 20 
thereby providing the card transfer receipt 7507. 
[1880] Upon receiving the card transfer receipt 7507, 
the mobile user terminal of user A decrypts it, and 
examines the digital signature of user B. Further, the 
mobile user terminal compares the public key certificate 25 
IDs 12119 and 12120 with the public key certificates of 
users B and A to verify the contents of the card transfer 
receipt 7507. The mobile user terminal then erases the 
transferred electronic payment card from the card list 
1713, and registers the card transfer receipt 12122 in 30 
use history 1715. At this time, addresses in the object 
data area at which the transfer offer number, the code 
information indicating the card transfer process, the 
issued time for the card transfer receipt 7507 and the 
card transfer receipt 12122 are stored are assigned to 35 
the request number 1840 in the use list 1715, the serv- 
ice code 1841, the use time 1842 and the use informa- 
tion address 1843. 

[1 881 ] The mobile user terminal of user A displays, on 
the LCD, a message indicating the completion of the 40 
transfer process (display the transfer process; 7508). 
The process at the mobile user terminal of user A 
(sender) is thereafter terminated. 
[1882] After transmitting the card transfer receipt 
7507, the mobile user terminal of user B displays the 45 
received card transfer certificate 1211 1 on the LCD. In 
addition, the mobile user terminal displays a dialogue 
message inquiring whether the transfer process with the 
service providing server (process for downloading the 
received electronic payment card from the service pro- so 
viding system) should be immediately performed (dis- 
play the transfer certificate; 7509). 
[1883] The dialogue message has two operating 
menus: "transfer process request" and "cancel. " When 
"cancer is selected, the transfer process performed 55 
with the service providing server is canceled, and in the 
process (data updating process) during which the serv- 
ice providing system updates the data in the mobile 



user terminal, an electronic payment card that has been 
transferred is assigned to the mobile user terminal. 
[1884] When user B selects "transfer process request" 
(transfer process request operation; 7510), based on 
the card transfer certificate 12111 the mobile user ter- 
minal generates a card transfer request 751 1, which is 
a message requesting that the transfer process be per- 
formed with the service providing system, and transmits 
it to the service providing system via digital wireless tel- 
ephone communication. 

[1885] As is shown in Fig. 122A, the digital signature 
of user B is provided for the data that consists of a card 
transfer request header 12200, which is header infor- 
mation indicating that the message is the card transfer 
request 7511 and describing the data structure; a 
decrypted card transfer certificate 12201 (12111); the 
user ID 12202 of user B; and an issued time 12203, 
which indicates the date when the card transfer request 
751 1 was issued. These data are closed and addressed 
to the service provider, thereby providing the card trans- 
fer request 7511. 

[1 886] Upon receiving the card transfer request 751 1 , 
the user processor of user B of the service providing 
system 110 decrypts it and examines the digital signa- 
ture, and transmits it to the service manager processor. 
The service manager processor generates a service 
director processor to form a process group for process- 
ing the card transfer request 12204. 
[1887] The service director processor, first refers to 
the user list 5200 and specifies the recipient (user B) 
and the sender (user A) of the transfer process by 
employing the public key certificate IDs 12106 and 
12107 in the card transfer certificate 12201 that is 
included in the card transfer request 12204. The service 
director processor examines the digital signature of the 
user A and the digital signature accompanying the elec- 
tronic payment card, which are provided for the card 
transfer certificate 1 2201 . and verifies the validity of the 
card transfer certificate 12201. Following this, the serv- 
ice director processor erases the electronic payment 
card to be transferred from the card list 461 1 of the user 
A that is stored in the user information server 902. Then, 
the service director processor changes the card signa- 
ture private key and card signature public key pair and 
the card certificate for a new key pair and a card certifi- 
cate, and also changes the card status and the total 
remaining value to the card status 1 21 02 and to the total 
remaining value 12103 for the card transfer certificate 
12201. The service director processor generates an 
electronic payment card received from user A, and 
enters it in the card list 461 1 for the user B. 
[1888] When the electronic payment card that is to be 
transferred has already been registered, the service 
director processor updates the registered card list 5402 
holding the electronic payment card. Specifically, the 
user ID 5418, the user public key 5419, the registered 
card certificate address 5420, the micro-check list 
address 5421 and the former user information address 
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5422, all of which are in the registered card list 5402, 
are updated (to the information for user B). The old 
information (information for user A) is pointed to at the 
former user information address 5422 as former user 
information 5423.. 5 
[1889] The service director processor generates a 
payment card transfer message 12215, which includes 
an electronic payment card transferred from user A. The 
user processor of user B closes the message 12215 
and addresses it to the user B, and transmits it as a pay- 10 
ment card transfer message 7512 to the mobile user 
terminal of user B via digital wireless telephone commu- 
nication. 

[1890] As is shown in Fig. 122B, the digital signature 
of the service provider is provided for the data that con- 75 
sist of a payment card transfer header 12208, which is 
header information indicating that the message is the 
card transfer 7512 and describing the data structure; a 
transfer number 1 2209, which is an arbitrarily generated 
number that represents the transfer process in the serv- 20 
ice providing system; transfer information 12210; an 
acceptance number 1221 1; an electronic payment card 
12212, which is transferred; a service provider ID 
12213; and an issued time 12214, which indicates the 
date when the payment card transfer message 7512 25 
was issued. These data are closed and addressed to 
the user B, thereby providing the card transfer message 
7512. 

[1 891 ] The transfer information 1 221 0 is information 
concerning the electronic payment card transfer proc- so 
ess performed by the service providing system, and is 
accompanied by the digital signature of the service pro- 
vider. 

[1 892] The mobile user terminal of user B decrypts the 
received payment card transfer message 7512 and ss 
examines the digital signature, registers the electronic 
payment card 12212 in the card list 1713, and displays 
the electronic payment card on the LCD (display the 
electronic payment card; 7513). The card transfer proc- 
ess is thereafter terminated. 40 
[1893] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the electronic payment card installation process- 
ing. 

[1894] In Fig. 78 are shown procedures for the 45 
exchange of messages by the devices during the elec- 
tronic payment card installation processing, and in Figs. 
125A and 125B, and 125A and 125B are shown the 
contents of messages that are exchanged during the 
electronic payment installation processing. 50 
[1895] First, when the user performs an electronic 
payment card installation operation 7800, the mobile 
user terminal generates an electronic payment card 
installation request 7801 , and transmits it to the service 
providing system 110 via digital wireless telephone ss 
communication. 

[1896] As is shown in Fig. 125A, the digital signature 
of the user is provided for the data that consists of an 



electronic payment card installation request header 
12500, which is header information indicating that the 
message is the electronic payment card installation 
request 7801 and describes the data structure; an 
installation card number 12501 and an installation 
number 12502, which are entered by a user; a request 
number 12503. which is an arbitrarily generated number 
that uniquely represents the electronic payment card 
installation process; a user ID 12504; and an issued 
time 12505. which indicates the date when the elec- 
tronic payment card installation request 7801 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the electronic pay- 
ment card installation request 7801 . 
[1897] Upon receiving the electronic payment card 
installation request 7801, the user processor of the 
service providing system 1 10 decrypts it and examines 
the digital signature, and transmits it to the service man- 
ager processor. The service manager processor gener- 
ates a service director processor to form a process 
group for processing the electronic payment card instal- 
lation request 12506. 

[1898] First, the service director processor refers to 
the installation card list that is indicated by the installa- 
tion card list address 5236 for the payment card issuer 
list 5204, and specifies a payment card issuer who 
issues a payment card that is represented by the instal- 
lation number 12501. The service director processor 
generates a payment card installation request 12517, 
which is a message requesting that the payment card 
issuer issue a payment card using the installation card. 
The payment card issuer processor closes the request 
1 251 7 and addresses it to the payment card issuer, and 
transmits it as a payment card installation request 7802 
to the payment card issuing system 108. 
[1 899] As is shown in Fig. 1 25B, the digital signature 
of the service provider is provided for the data that con- 
sist of a payment card installation request header 
12510, which is header information indicating that the 
message is the payment card installation request 7802 
and describing the data structure; an installation card 
number 1251 1 ; an installation number 12512; a request 
number 12513; a customer number 12514, which 
uniquely represents a user for the payment card issuer; 
a service provider ID 12515; and an issued time 12516, 
which indicates the date when the payment card instal- 
lation request 7802 was issued. These data are closed 
and addressed to the payment card issuer, thereby pro- 
viding the payment card installation request 7802. 
[1900] Upon receiving the payment card installation 
request 7802, the payment card issuing system 108 
decrypts it and examines the digital signature. The pay- 
ment card issuing server 1200 compares the installation 
card number 12511 and the installation number 12512, 
which are included in the payment card installation 
request 7802, with the management information for the 
issued electronic payment card installation card that is 
stored in the payment card issuing information server 
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1202. The payment card issuing server 1200 then 
updates the data in the customer information server 
1202 and the payment card issuing information server 

1203. Furthermore, the payment card issuing server 
generates payment card data (12606) for a requested 5 
payment card, and transmits, to the service providing 
system, an electronic payment card installation com- 
mission 7803, which is a message requesting the instal- 
lation of an electronic payment card that corresponds to 
the requested payment card. 1{ 
[1901] As is shown in Fig. 126A, the digital signature 

of the payment card issuer is provided for the data that 
consists of an electronic payment card installation com- 
mission header 12600, which is header information indi- 
cating that the message is the electronic payment card n 
installation commission 7803 and describing the data 
structure; a transaction number 12601 , which is an arbi- 
trarily generated number that uniquely represents the 
transaction with a user; payment card issuing informa- 
tion 12602; a request number 12603; card code 12604, 2c 
which indicates the type of electronic payment card that 
is to be issued; a template code 12605, which indicates 
a template program for an electronic payment card to be 
issued; payment card data 12606; representative com- 
ponent information 12607; a payment card issuer ID 25 
12608; and an issued time 12609, which indicates the 
date when the electronic payment card installation com- 
mission 7803 was issued. These data are closed and 
addressed to the service provider, thereby providing the 
electronic payment card installation commission 7803. 30 
[1902] The payment card issuing information 12602 is 
information concerning the payment card issuing proc- 
ess performed by the payment card issuing system, and 
is accompanied by the digital signature of the payment 
card issuer. 35 
[1 903] The payment card data 1 2606 is payment card 
information issued by the payment card issuer, wherein 
the digital signature of the payment card issuer accom- 
panies the data that consists of the card ID 12614. the 
payment card information 12615 and the card ID 12616. 40 
[1 904] The payment card issuer processor of the serv- 
ice providing system decrypts the received electronic 
payment card installation commission 7803 and exam- 
ines the digital signature, and transmits the commission 
7803 to the service director processor. In accordance 45 
with the electronic payment card installation commis- 
sion 1261 0, the service director processor generates an 
electronic payment card to be issued to a user, using 
the same procedures as are used for the payment card 
purchase processing, and also generates an electronic so 
payment card installation message 12615, which is a 
message directing that the electronic payment card be 
installed in the mobile user terminal. The user proces- 
sor closes the electronic payment card installation mes- 
sage 12655 and addressees it to a user, and transmits ss 
it as an electronic payment card installation message 
7804 to the mobile user terminal via digital wireless tel- 
ephone communication. 



[1905] As is shown in Fig. 1 26B, the digital signature 
of the service provider is provided for the data that con- 
sists of an electronic payment card installation header 
12617, which is header information indicating that the 
message is the electronic payment card installation 
message 7804 and describing the data structure; a 
transaction number 12618; payment card issuing infor- 
mation 12619, which concerns the payment card issu- 
ing process performed by the payment card issuing 

? system; payment card issuing information 12620, which 
concerns the payment card issuing process performed 
by the service providing system; a request number 
12621; generated electronic payment card data 12622; 
a service provider ID 12623; and an issued time 12624, 

r which indicates the date when the electronic payment 
card installation message 7804 was issued. These data 
are closed and addressed to the user, thereby providing 
the electronic payment card installation message 7804. 
The payment card issuing information 12619 and the 
payment card issuing information 12620 are accompa- 
nied by the digital signatures of the payment card issuer 
and the service provider. 

[1 906] The mobile user terminal decrypts the received 
electronic payment card installation message 7804 and 
examines the digital signature, registers, in the card list 
1713, the electronic payment card included in the elec- 
tronic payment card installation request 7804, and dis- 
plays the installed electronic payment card on the LCD 
(display the electronic payment card; 7805). 
[1907] An explanation will now be given for the con- 
tents of messages that are exchanged by devices in var- 
ious processes for electronic telephone card service. 
[1908] First, an explanation will be given for the con- 
tents of messages that are exchanged by devices dur- 
ing the telephone card purchase processing. 
[1909] In Fig. 63 are shown the procedures for the 
exchange of messages by devices during the telephone 
card purchase processing. In Figs. 101 A and 101 B, 
102A and 102B, 103A and 103B, 104A and 104B, and 
105A and 105B are shown the contents of messages 
that are exchanged by devices during the telephone 
card purchase processing. 

[1910] First, when a user performs a telephone card 
purchase order operation 6300, the mobile user termi- 
nal transmits a telephone card purchase order 6301 to 
the service providing system through digital wireless tel- 
ephone communication. 

[1911] As is shown in Fig. 101A, the digital signature 
of a user is provided for data that consists of a tele- 
phone card purchase order header 10100, which is 
header information identifying the message as the tele- 
phone card purchase order 6301 and describing the 
data structure; a response code 10101, which identifies 
the type of service requested by the user; a card order 
code 10102. which identifies an order code for a tele- 
phone card that is entered by the user; a number of tel- 
ephone cards 10103 that the user has entered; a 
payment service code 10104, which identifies a credit 
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card designated by the user; a payment value 10105; a 
payment option code 10106, which identifies a payment 
option, such as the number of payments designated by 
the user; a request number 10107, which is an arbitrar- 
ily generated number that uniquely represents the tele- s 
phone card purchase processing; a validity term 10108 
for the telephone card purchase order 6301 ; a user ID 
10109; and an issued time 10110, which is the date on 
which the telephone card purchase order 6301 was 
issued. These data are closed and addressed to the ; 
service provider, thereby providing the telephone card 
purchase order 63@01. The service code 8901 identi- 
fies the purchase order of a telephone card to a tele- 
phone card issuer who is selected by the user. 
[1912] Upon receiving the telephone card purchase 
order 6301 , the user processor of the service providing 
system 110 decrypts it and examines the digital signa- 
ture, and transmits it to the service manager processor. 
Then, the service manager processor generates a serv- 
ice director processor to form a process group that proc- 
esses a telephone card order 10111. The service 
director processor refers to the telephone card issuer 
list 5205 and generates a telephone card purchase 
order 10126 tor the telephone card issuer indicated by 
the service code 10101. The telephone card issuer 
processor closes the telephone card order and 
addresses it to the telephone card issuer, and transmits 
the resultant order as a telephone card purchase order 
6302 to the telephone card issuing system 109. 
[1 91 3] As is shown in Fig. 101 B. the digital signature 
of a service providing system is provided for data that 
consists of a telephone card purchase order header 
10115, which is header information indicating that the 
message is the telephone card purchase order 6302 
and describing the data structure; a card order code 
101 16; a number of cards 10117 that are purchased; a 
payment service code 1 01 1 8; a payment value 1 01 1 9; a 
payment option code 10120; a request number 10121; 
a customer number 1 0122, which uniquely represents a 
user for the telephone card issuer; a validity term 1 01 23 
for the telephone card purchase order 6302; a service 
provider ID 10124; and an issued time 10125, which is 
the date on which the telephone card purchase order 
6302 was issued. These data are closed and addressed 
to the telephone card issuer, thereby providing the tele- 
phone card purchase order 6302. 
[1914] When there was a previous transaction to 
which the user and the telephone card issuer were par- 
ties, a customer number that is registered in the cus- 
tomer table of the telephone card issuer is established 
as the customer number 10122. When there was no 
previous transaction, the service director processor 
generates for the telephone card issuer a number that 
uniquely represents the user, establishes it as the cus- 
tomer number 10122. and registers that number in the 
customer table. The customer table is designated by 
using the customer table address 5244 of the telephone 
card issuer list 5205. 



[1915] Upon receiving the telephone card purchase 
order 6302, the telephone card issuing system 109 
decrypts it and examines the digital signature. The tele- 
phone card issuing server 1300 updates the data in the 
customer information server 1301. the telephone card 
issuing information server 1302 and the telephone card 
information server 1303, generates telephone card data 
(10219) for the ordered telephone card, and transmits, 
to the service providing system, an electronic telephone 
card issuing commission 6303, which constitutes a 
message requesting the process for issuing an elec- 
tronic telephone card that corresponds to the telephone 
card and the process for settling the price of the tele- 
phone card. 

[191 6] As is shown in Fig. 102A, the digital signature 
of a telephone card issuer is provided for data that con- 
sists of an electronic telephone card issuing commis- 
sion header 10200, which is header information 
identifying the message as the electronic telephone 
card issuing commission 6303 and describing the data 
structure; a transaction number 10201 , which is an arbi- 
trarily generated number that uniquely identifies a trans- 
action to which a user is a party; a sales value 10202, 
which conveys the price of a telephone card; a clearing 
25 option 10203. which indicates which clearing proce- 
dures apply; a request number 10204; a telephone card 
code 10205, which identifies the type of electronic tele- 
phone card that is to be issued; a template code 10206, 
which identifies a template program to be used for an 
30 electronic telephone card that is to be issued; a number 
of telephone cards 10207, which indicates how many 
telephone cards are to be issued; telephone card data 
10208; representative component information 10209; a 
telephone card issuer ID 10210; and an issued time 
35 10211, which is the date on which the electronic tele- 
phone card issuing commission 6303 was issued. 
These data are closed and addressed to the service 
provider, thereby providing the electronic telephone 
card issuing commission 6303. 
40 [1917] The clearing option 10203 is information by 
which the telephone card issuing system designates, to 
the service providing system, the procedures to be used 
for clearing the price of a telephone card. The clearing 
process is roughly divided into a spontaneous clearing 
45 process for issuing an electronic telephone card to a 
user after the price of the telephone card has been 
cleared, and a delayed clearing process for clearing the 
price of a telephone card after an electronic telephone 
card has been issued. The clearing option 10203 is 
so used to designate either clearing process. 

[1 91 8] In the delayed clearing process, since an elec- 
tronic telephone card is issued to a user before the 
clearing process is performed, the user does not have 
to wait. 

55 [1919] For example, based on a purchase history 
maintained for customers, the telephone card issuer 
can designate the delayed clearing process for a cus- 
tomer with whom it has had dealings and who is known 
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to be trustworthy, and can designate the spontaneous 
clearing for a customer with whom it has had no previ- 
ous dealings. 

[1920] The telephone card data 10208 is telephone 
card information issued by the telephone card issuer A 
number of telephone card information items equivalent 
to the number of telephone cards 1 0207 are established 
as the telephone card data 10208. For one telephone 
card, the digital signature of a telephone card issuer is 
provided for data that consist of a card ID 10216, card 
information 10217 and a telephone card issuer ID 
10218, and the telephone card information is thereby 
provided. The telephone card information 10217 is 
ASCII information describing the contents of a tele- 
phone card. For the telephone card information 10217, 
the title of a telephone card, the face value of the tele- 
phone card that is issued, the usage condition, an 
issuer, and whether it can be transferred, are described 
using a form whereby tag information representing infor- 
mation types is additionally provided. 
[1921] The representative component information 
10209 is information that is established as the repre- 
sentative component information 2132 for an electronic 
telephone card to be generated. Therefore, the repre- 
sentative component information 10209 may not be set 
for use. 

[1922] The telephone card issuer processor of the 
service providing system receives the electronic tele- 
phone card issuing commission 6303, decrypts it and 
examines the digital signature, and transmits it to the 
service director processor. The service director proces- 
sor performs the electronic telephone card issuing proc- 
ess and the telephone card price clearing process in 
accordance with the clearing procedures designated by 
using the clearing option 10203. 
[1923] In Fig. 63 is shown the spontaneous clearing 
process. The delayed clearing process will be described 
later. 

[1924] For the spontaneous clearing, the service 
director processor generates a clearing request 10324. 
which is a message requesting the clearing of the price 
of a telephone card. The transaction processor proces- 
sor doses the clearing request 10324 and addresses it 
to the transaction processor, and then transmits it as a 
clearing request 6304 to the transaction processing sys- 
tem 106. 

[1925] As is shown in Fig. 103B, the digital signature 
of a service provider is provided for data that consists of 
a clearing request header 10314, which is header infor- 
mation indicating that the message is the clearing 
request 6304 and describing the data structure; a user 
clearing account 10315, which includes a credit card 
that corresponds to the payment service code desig- 
nated by the user; a telephone card issuer clearing 
account 10316. which designates the clearing account 
of a telephone card issuer; a payment value 10317; a 
payment option code 10318; a request number 10319, 
which is issued by the mobile user terminal 1 00; a trans- 



action number 10320, which is issued by the telephone 
card issuing system; a validity term 10321, which 
presents the period during which the clearing request 
6304 is effective; a service provider ID 10322; and an 
s issued time 10323, which indicates the date on which 
the clearing request 6304 was issued. TTiese data are 
closed and addressed to the transaction processor, 
thereby providing the clearing request 6304. 
[1926] The transaction processing system 106 
w receives the clearing request 6304. decrypts it and 
examines the digital Signature, and performs the clear- 
ing process. Then, the transaction processing system 
106 generates a clearing completion notification 6305, 
and transmits it to the service providing system 1 10. 
is [1 927] As is shown in Fig. 1 04A, the digital signature 
of a transaction processor is provided for data that con- 
sist of a clearing completion notification header 10400, 
which is header information indicating that the message 
is the clearing completion notification 6305 and describ- 
ee ing the data structure; a clearing number 10401 , which 
is an arbitrarily generated number that uniquely repre- 
sents the clearing process performed by the transaction 
processing system 106; a user clearing account 10402; 
a telephone card issuer clearing account 10403; a pay- 
25 ment value 10404; a payment option code 10405; a 
request number 10406; a transaction number 10407; 
clearing information 10408 for a service provider that is 
accompanied by the digital signature of the transaction 
processor; clearing information 10409 for a telephone 
30 card issuer that is accompanied by the digital signature 
of the transaction processor; clearing information 10410 
for a user that is accompanied by the digital signature of 
the transaction processor; a transaction processor pro- 
vider ID 10411; and an issued time 10412, which indi- 
35 cates the date on which the clearing completion 
notification was issued. These data are closed and 
addressed to the service provider, thereby providing the 
clearing completion notification 6305. 
[1928] Upon receiving the clearing completion notifi- 
40 cation 6305, the transaction processor processor of the 
service providing system 110 decrypts it and examines 
the digital signature, and transmits a clearing comple- 
tion notification 10413 to the service director processor. 
Upon receiving the clearing completion notification 
45 10413, the service director processor generates a 
clearing completion notification 10430 for the telephone 
card issuer. The telephone card issuer processor closes 
the clearing completion notification 10430. and trans- 
mits it to the telephone card issuing system 109 as a 
50 clearing completion notification 6306 for the telephone 
card issuer. 

[1929] As is shown in Fig. 104B, the digital signature 
of a service provider is provided for data that consist of 
a clearing completion notification header 10417, which 
ss is header information indicating that the message is the 
clearing completion notification 6306 and describing the 
data structure; a clearing number 10418; a customer 
number 10419; a telephone card issuer ID 10420; a 
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payment service code 1 0421 ; a payment value 1 0422; a 
payment option code 10423; a request number 10424; 
a transaction number 10425; clearing information 
10426 for a telephone card issuer that is accompanied 
by the digital signature of the transaction processor ; a 
transaction processor ID 10427; a service provider ID 
10428; and an issued time 10429, which indicates the 
date on which the clearing completion notification was 
issued. These data are closed and addressed to the tel- 
ephone card issuer, thereby providing the clearing com- 
pletion notification 6306. 

[1930] Upon receiving the clearing completion notifi- 
cation 6306, the telephone card issuing system 
decrypts it and examines the digital signature, and gen- 
erates a receipt 6307 and transmits it to the service pro- 
viding system. 

[1931] As is shown in Fig. 105A, the digital signature 
of a telephone card issuer is provided for data that con- 
sists of a receipt header 10500, which is header infor- 
mation indicating that the message is the receipt 6307 
and describing the data structure; a customer number 
10501; telephone card issuing information 10502; a 
payment service code 10503; a payment value 10504; a 
payment option code 10505; a request number 10506; 
a transaction number 10507; clearing information 
10508; a transaction processor ID 10509; a telephone 
card issuer ID 10510; and an issued time 1051 1 , which 
indicates the date on which the receipt 6307 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the receipt 6307. 
The telephone card issuing information 10502 is infor- 
mation concerning the telephone card issuing process 
performed by the telephone card issuing system, and is 
accompanied by the digital signature of the telephone 
card issuer. 

[1 932] Upon receiving the receipt 6307, the telephone 
card issuer processor of the service providing system 
110 decrypts it and examines the digital signature, and 
transmits a receipt 1051 2 to the service director proces- 
sor. The service director processor employs the receipt 
10512 to generate a receipt 10523 for a user. 
[1 933] In addition, the service director processor gen- 
erates a clearing completion notification 10430 for the 
telephone card issuing system, generates an electronic 
telephone card to be issued to the user, and further gen- 
erates an electronic telephone card issuing message 
10227 that includes the electronic telephone card that is 
generated. 

[1934] The user processor closes the electronic tele- 
phone card issuing message 10227 and the receipt 
10523 while addressing them to the user, and transmits 
them as an electronic telephone card issuing message 
6308 and a receipt 6309 to the mobile user terminal 1 00 
via digital wireless communication. 
[1935] As is shown in Fig. 102B. the digital signature 
of a service provider is provided for data that consist of 
an electronic telephone card issuing header 10220, 
which is header information indicating that the message 



is the electronic telephone card issuing message 6308 
and describing the data structure; a transaction number 
10221; a request number 10222; the number of tele- 
phone cards 10223; electronic telephone card data 
5 10224 that are generated; a service provider ID 10225; 
and an issued time 10226, which indicates the date on 
which the electronic telephone card issuing message 
6308 was issued. These data are closed and addressed 
to the user, thereby providing the electronic telephone 
10 card issuing message 6308. The electronic telephone 
card data 10224 includes electronic telephone cards 
10231 equivalent in number to the number of telephone 
cards 10223. 

[1936] As is shown in Fig. 105B, the digital signature 
is of a service provider is provided for data that consists of 
a receipt header 10516, which is header information 
indicating that the message is the receipt 6309 and 
describing the data structure; a user ID 10517; a receipt 
10518 (10512) obtained by decryption; clearing infer- 
20 mation 1 051 9 for a user that is accompanied by the dig- 
ital signature of a transaction processor; telephone card 
issuing information 10520; a service provider ID 10521 ; 
and an issued time 10522, which indicates the date on 
which the receipt 6309 was issued. These data are 
25 closed and addressed to the user, thereby providing the 
receipt 6309. The telephone card issuing information 
10520 is information for the electronic telephone card 
issuing process performed by the service providing sys- 
tem, and is accompanied by the digital signature of the 
30 service provider. 

[1937] Upon receiving the electronic telephone card 
issuing message 6308 and the receipt 6309, the mobile 
user terminal decrypts them and examines the digital 
signatures, enters in the telephone card list 1714 an 
35 electronic telephone card included in the electronic tele- 
phone card issuing message 6308, enters the receipt 
10523 in the use list 1715. and displays the electronic 
telephone card on the LCD 303. 
[1 938] The generation of an electronic telephone card 
40 by the service director processor is performed as fol- 
lows. 

[1939] First, the service director processor refers to 
the electronic telephone card template list 5105 for the 
telephone card issuer that is stored in the telephone 
45 card issuer information server. Then, by using the elec- 
tronic telephone card template program that is identified 
by the template code 10206 of the electronic telephone 
card issuing commission 6303, the service director 
processor generates a telephone card program for an 
so electronic telephone card. Specifically, the telephone 
card program data 2113 for an electronic telephone 
card are generated using the transaction module and 
the representation module, which are described as 
being located at the transaction module address 5119. 
55 and the representation module address 5120 in the 
electronic telephone card template list 5105, and the 
representative component information 10209 in the 
electronic telephone card issuing commission 6303. 
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When the representative component information 10209 
is not present in the electronic telephone card issuing 
commission 6303, the default representative compo- 
nent information located at the default representative 
component information address 5121 is employed as 5 
the information for an electronic telephone card. 
[1 940] Following this and based on the telephone card 
information included in the card information 10217, the 
service director processor generates the card status 
2107 and the total remaining value 2108. Whether the w 
card status 2107 can be transferred is designated, and 
the face value of the telephone card that is issued is set 
as the total remaining value 2107. The service director 
processor generates a new pair consisting of a card sig- 
nature private key and a card signature public key. and 15 
further generates the telephone card program 2101 for 
an electronic telephone card by employing the card pri- 
vate key and the accounting machine public key that are 
registered in the electronic telephone card management 
information 5500. 2Q 
[1941] Furthermore, the service director processor 
generates an electronic telephone card by employing 
the obtained card signature public key to generate the 
certificate 2103 for the electronic telephone card, and 
by employing the telephone card data 10219 in the elec- 25 
tromc telephone card issuing commission 6303 to gen- 
erate the presentation card 2102 for the electronic 
telephone card. 

[1942] The procedures for the delayed clearing will 
now be described. 30 
[1943] In Fig. 64 are shown the procedures for 
exchanging messages between the devices in the tele- 
phone card purchase process for the delayed clearing. 
The same process is performed as is used for the spon- 
taneous clearing until the telephone card issuing sys- 35 
tern transmits the electronic telephone card issuing 
commission to the service providing system. 
[1944] When the delayed clearing is designated by the 
clearing option 10203, the service director processor 
generates an electronic telephone card to be issued to 40 
the user, and also generates the electronic telephone 
card issuing message 10227, which includes the gener- 
ated electronic telephone card, and a temporary receipt 
message 10310, which corresponds to a temporary 
receipt. The generation of the electronic telephone card 45 
is performed in the same manner as that used for the 
spontaneous clearing. 

[1 945] The user processor closes the electronic tele- 
phone card issuing message 10227 and the temporary 
receipt 9810 and addresses them to the user, and trans- so 
mits these messages as an electronic telephone card 
issuing message 6404 and a temporary receipt 6405 to 
the mobile user terminal 100 via digital wireless tele- 
phone communication. 

[1946] As is shown in Fig. 1 03A, the digital signature ss 
of a service provider is provided for data that consists of 
a temporary receipt header 10300, which is header 
information indicating that the message is the tempo- 



rary receipt 6405 and describing the data structure; a 
user ID 10301; telephone card issuing information 
10302; a payment service code 10303; a payment value 
10304; a payment option code 10305; a request 
number 10306; a transaction number 10307; a service 
provider ID 10308; and an issued time 10309, which 
indicates the date on which the temporary receipt 6405 
was issued. These data are closed and addressed to 
the user, thereby providing the temporary receipt 6405. 
The telephone card issuing information 10302 is infor- 
mation concerning the electronic telephone card issuing 
process that is performed by the service providing sys- 
tem, and is accompanied by the digital signature of the 
service provider. 

[1947] The data structure of the electronic telephone 
card issuing message 6404 is the same as that used for 
the electronic telephone card issuing message 6308. 
[1948] Upon receiving the electronic telephone card 
issuing message 6404 and the temporary receipt 6405, 
the mobile user terminal decrypts them and examines 
the digital signatures, enters an electronic telephone 
card included in the electronic telephone card issuing 
message 6404 in the telephone card list 1714, enters 
the temporary receipt 10310 in the use list 1715, and 
displays the electronic payment card on the LCD 303. 
[1949] Following this, the service director processor 
performs the clearing process for the price of the tele- 
phone card. First, the service director processor gener- 
ates a clearing request 10324, which is a message 
requesting the performance of the clearing process for 
the price of the telephone card. The transaction proces- 
sor closes the clearing request 10324 and addresses it 
to the transaction processor, and transmits it as a clear- 
ing request 6407 to the transaction processing system 
106. 

[1950] Upon receiving the clearing request 6407, the 
transaction processing system 106 decrypts it and 
examines the digital signature, and performs the clear- 
ing process. The transaction processing system 106 
generates a clearing completion notification 6408 and 
transmits it to the service providing system 110. 
[1951] Upon receiving the clearing completion notifi- 
cation 6408, the transaction processor of the service 
providing system 1 10 decrypts it and examines the dig- 
ital signature, and transmits a clearing completion noti- 
fication 10413 to the service director processor. The 
service director processor employs the received clear- 
ing completion notification 10413 to generate a clearing 
completion notification 10430 for the telephone card 
issuer. And the telephone card issuer processor closes 
the clearing completion notification 1 0430 and transmits 
it to the telephone card issuing system 109 as a clearing 
completion notification 6409 for the telephone card 
issuer. 

[1952] The telephone card issuing system decrypts 
the received clearing completion notification 6409 and 
examines the digital signature, and generates a receipt 
6410 and transmits it to the service providing system. 
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[1953] The telephone card issuer processor erf the 
service providing system decrypts the received receipt 
6410 and examines the digital signature, and transmits 
a receipt 10512 to the service director processor. The 
service director processor employs the receipt 10512 to 
generate a receipt 10523 for a user. 
[1954] The receipt 10523 that is generated is not 
immediately transmitted to the mobile user terminal 1 00 
of the user. When the mobile user terminal has per- 
formed the data updating process, the user processor 
replaces the temporary receipt 10310 in the use list 
1715 with the receipt 10523, and transmits the receipt 
10523 as one part of the update data 641 1 to the mobile 
user terminal 100. 

[1955] The data structures of the clearing request 
6407, the clearing completion notification 6408, the 
clearing completion notification 6409 and the receipt 
6410 for the delayed clearing are the same as those 
provided for the clearing request 6304. the clearing 
completion notification 6305. the clearing completion 
notification 6306 and the receipt 6307 for the spontane- 
ous clearing. 

[1 956] The delayed clearing process need not be per- 
formed immediately after the electronic telephone card 
is issued, and together with the other clearing proc- 
esses, may be performed, for example, once a day. 
[1957] An explanation will now be given for the con- 
tents of messages that are exchanged by the mobile 
user terminal 1 00 and the service providing system 1 1 0 
during the telephone card registration processing. 
[1958] In Fig. 65C are shown the procedures for 
exchanging messages between devices in the tele- 
phone card registration processing, and in Figs. 108A 
and 108B are shown the contents of messages that are 
exchanged by the devices in the telephone card regis- 
tration processing. 

[1 959] First, when the user performs an electronic tel- 
ephone card registration operation 6508, the mobile 
user terminal generates a telephone card registration 
request 6509 and transmits it to the service providing 
system via digital wireless telephone communication. 
[1960] As is shown in Fig. 108 A, the digital signature 
of a user is provided for data that consists of a tele- 
phone card registration request header 10800, which is 
header information indicating that the message is the 
telephone card registration request 6509 and describing 
the data structure; a card ID 10801 of a telephone card 
to be registered; a user ID 10802; and an issued time 
10803, which indicates the date on which the telephone 
card registration request 6509 was issued. These data 
are closed and addressed to the service provider, 
thereby providing the telephone card registration 
request 6509. 

[1961] The user processor of the service providing 
system decrypts the received telephone card registra- 
tion request 6509 and examines the digital signature, 
and transmits the request 6509 to the service manager 
processor. The service manager processor generates a 



service director processor to form a process group that 
processes a telephone card registration request 1 0804. 
The service director processor ascertains that the elec- 
tronic telephone card indicated by the card ID 10801 is 
5 registered in the telephone card list 4612 for the user in 
the user information server 902, and registers that elec- 
tronic telephone card in the registered card list 5502 for 
electronic telephone cards of the service director infor- 
mation server 901. At this time, the service director 
10 processor newly generates a card signature private key 
and a card signature public key pair. Further, the service 
director processor generates a registered card certifi- 
cate using the card signature public key. and registers it 
in the registered card list 5502. The service director 
« processor then generates a card certificate issuing 
message 10813 using the card signature private key 
and the registered card certif icate that has been gener- 
ated The user processor closes the card certificate 
issuing message 10813 and addresses it to the user, 
20 and transmits it as a telephone card certificate issuing 
message 6510 to the mobile user terminal via digital 
wireless telephone communication. 
[1962] As is shown in Fig. 108B, the digital signature 
of a service provider is provided for data that consists of 
25 a telephone card certificate issuing header 10808. 
which is header information indicating that the message 
is the telephone card certificate issuing message 6510 
and describing the data structure; a card digital signa- 
ture private key 10809; a registered card certificate 
30 10810; a service provider ID 1081 1 . and an issued time 
10812. which indicates the date on which the telephone 
card certificate issuing message 6510 was issued. 
These data are closed and addressed to the user, 
thereby providing the telephone card certificate issuing 
35 message 6510. 

[1963] The mobile user terminal 100 decrypts the 
received card certificate issuing message 6510 and 
examines the digital signature, replaces the card signa- 
ture private key and the card certificate of an electronic 
40 telephone card with the card signature private key 
10809 and the registered card certificate 10810, both of 
which are included in the telephone card certificate 
issuing message 6510. changes the registration state in 
the card status to the post-registration state, and dis- 
45 plays on the LCD the electronic telephone card that has 
been registered (display a telephone card that is regis- 
tered; 6511). 

[1 964] An explanation will now be given for the con- 
tents of messages that are exchanged by the service 
so providing system 1 1 0 and the electronic telephone card 
accounting machine 800 (switching center 105) during 
the tel ephone card setup processing. 
[1965] The telephone card setup processing is not 
performed in accordance with a special processing 
55 sequence, but is performed in the data updating proc- 
ess during which the service providing system updates 
the data in the electronic telephone card accounting 
machine 800. 
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[1966] Therefore, for the telephone card setup proc- 
ess, the procedures for the exchange of messages by 
the service providing system and the electronic tele- 
phone card accounting machine 800, and the contents 
(data structures) of the messages to be exchanged are s 
the same as those used for the above described data 
updating processing. 

[1 967] It should be noted, however, that the telephone 
card setup process is not performed each time the data 
updating process is performed, but when the telephone 10 
card list 4610 for the merchant stored in the merchant 
information server 903 is updated by the service direc- 
tor processor. 

[1968] When the telephone card list 4610 is updated, 
the merchant processor includes updated data in the 15 
telephone card list 4610 for the compressed update 
data 8828 in the update data 5705, and transmits the 
resultant data as update data 5705 to the electronic tel- 
ephone card accounting machine 800. 
[1 969] Upon receiving the update data 5705, the elec- 20 
tronic telephone accounting machine decompresses 
the update data 8828, and updates the data in the RAM 
and on the hard disk. At this time, the telephone card list 
3908 in the electronic telephone card accounting 
machine 800 is updated, and an electronic telephone 25 
card that is handled by the electronic telephone card 
accounting machine 800 is updated. 
[1970] An explanation will now be given for the con- 
tents of messages that are exchanged by between the 
mobile ussr terminal 100 and the electronic telephone so 
card accounting machine 800 (switching center 105) 
during the telephone card clearing processing. 
[1971] In Fig. 70 are shown procedures for the 
exchange of messages by the mobile user terminal 100 
and the electronic telephone card accounting machine 35 
800 (switching center 105) during the telephone card 
clearing processing, and in Figs. 114A and 114B and 
Figs. 1 15A and 1 15B are shown the contents of mes- 
sages that are exchanged by the mobile user terminal 
100 and the electronic telephone card accounting 40 
machine 800 (switching center 105) during the tele- 
phone card clearing processing. 
[1972] First, when a user displays an electronic tele- 
phone card used for communication and performs a 
calling operation 7000, the mobile user terminal 45 
employs a telephone card that is to be used for commu- 
nication and an arbitrarily generated test pattern and 
produces a micro-check call request 7001, which is a 
message for requesting that a telephone number 
entered by a user be dialed by using the electronic tele- so 
phone card. The mobile user terminal transmits the 
request 7001 to the switching center 105 via infrared 
communication. 

[1 973] As is shown in Fig. 1 HA, the micro-check call 
request 7001 consists of a micro-check call request 55 
header 11400, which is header information indicating 
that the message is the micro-check call request 7001 
and describes the data structure; a service code 1 1401 



which identifies the request for communication using an 
electronic telephone card; a request number 11402, 
which is an arbitrarily generated number that uniquely 
represents the telephone card clearing process; an tel- 
ephone number 11403 that is a telephone number 
entered by the user; a presentation card 1 1403 for pre- 
senting an electronic telephone card to be used for the 
communication; a card certificate 11405; a current card 
status 11406 for an electronic telephone card to be 
used for the communication; a total remaining value 
11407; a card ID 11408; an issued time 11409, which 
indicates the date on which the micro-check call request 
7001 was issued; and an accounting machine test pat- 
tern 11411, which is an arbitrarily generated test pat- 
tern. The digital signature is provided, using the card 
signature private key of an electronic telephone card, for 
the card status 1 1406, the total remaining value 1 1407, 
the card ID 11408 and the issued time 11409. The 
accounting machine test pattern 11411 is encrypted 
using the accounting machine public key. 
[1974] The presentation card 1 1404, the card certifi- 
cate 1 1405, the card status 1 1406, the total remaining 
value 11407, the card ID 11408 and the issued date 
1 1409 specify the contents of the electronic telephone 
card for the electronic telephone card accounting 
machine 800, and the accounting machine test pattern 
1 141 1 is a test pattern for authorizing the electronic tel- 
ephone card accounting machine 800. 
[1975] Upon receiving the micro-check call request 
7001 at the switching center 105, first the electronic tel- 
ephone card accounting machine 800 refers to the tele- 
phone card list 3908 and activates a telephone card 
clearing module that corresponds to the card code 
(included in a presentation card) for the electronic tele- 
phone card that is presented. Then, the electronic tele- 
phone card accounting machine 800 examines the 
validity of the contents of the micro-check call request 
7001, generates a micro-check call response 7002. 
which charges a communication fee V (V < 0) for a pre- 
determined communication T (T > 0), and transmits it to 
the mobile user terminal via digital wireless telephone 
communication. When the electronic telephone card 
that is presented is not registered in the telephone card 
list 3908, the micro-check call response 3908 is trans- 
mitted, which indicates that the pertinent electronic tele- 
phone card is not available. 

[1976] In the verification processing for determining 
the validity of the micro-check call request 7001, first, 
the electronic telephone card accounting machine 800 
employs the feet that the card certificate 1 1405 is a reg- 
istered card certificate, and examines the card status 
1 1406 and the total remaining value 1 1 407 to determine 
whether the electronic telephone card is valid and can 
be used as a telephone card for the payment of the 
communication charge. Then, the electronic telephone 
card accounting machine 800 examines the presenta- 
tion card 1 1404, the digital signature of the service pro- 
vider that is provided for the card certificate 1 1405, and 
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the validity term. Further, the merchant terminal 
employs the card signature public key of the card certif- 
icate 1 1405 to examine the digital signature of the elec- 
tronic telephone card that is provided for the card status 
11406, the total remaining value 11407, the card ID 
11408 and the issued time 11409. In this fashion, the 
validity of the micro-check call request 7001 is verified. 
[1977] In the generation of the micro-check call 
response 7002, the electronic telephone card account- 
ing machine 800 decrypts the accounting machine test 
pattern 11411 using the accounting machine private 
key, and employs the card public key to encrypt the card 
test pattern 1 141 1 that is arbitrarily generated. 
[1 978] As is shown in Fig. 1 1 4B, the digital signature 
of a communication service provider is provided for the 
data that consists of a micro-check call response 
header 11413, which is header information indicating 
that the message is the micro-check call response 7002 
and describing the data structure; a transaction number 
11414; a response message 11415; a request number 
11416; a card ID 11417; an instruction code 11418; an 
amount of charge 1 1419, which indicates the communi- 
cation fee V for the communication time T; an account- 
ing machine test pattern 11420, which is decrypted; a 
card test pattern 11421. which is an arbitrarily gener- 
ated test pattern; an accounting machine ID 11423; a 
communication service provider ID 11424; and an 
issued time 11425, which indicates the date on which 
the micro-check call response 7002 was issued. In this 
fashion, the micro-check call response 7002 is pro- 
vided. The card test pattern 11421 is encrypted using 
the card public key. 

[1979] The transaction number 11414 is a number 
that is arbitrarily generated, by the electronic telephone 
card accounting machine 800, and that uniquely repre- 
sents the telephone card clearing process. When, as a 
result of the examination of the micro-check call request 
7001, the telephone card clearing process can not be 
performed (when an electronic telephone card is one 
that can not be handled by the pertinent electronic tele- 
phone card accounting machine 800), a value of 0 is 
set. When the telephone card clearing process can be 
performed, a value other than 0 is set. 
[1 980] The response message 1 1 41 5 is text informa- 
tion constituting the message transmitted by the com- 
munication service provider to the user. When the 
electronic telephone card accounting machine 800 can 
not handle an electronic telephone card that has been 
presented (transaction number = 0). data to that effect is 
included in the response message. The response mes- 
sage is prepared optionally, and may not be prepared. 
[1 981 ] The instruction code 11418 is command code 
information for an electronic telephone card, and is 
used when a value equivalent to the amount of charge 
1 1419 is subtracted from the total remaining value held 
by the electronic telephone card. The instruction code is 
varied by combining the electronic telephone card 
transaction module and the telephone card clearing 



module. 

[1982] When the mobile user terminal receives the 
micro-check call response 7002, first, for verification of 
to verify the electronic telephone card accounting 
5 machine 800, it compares the accounting machine test 
pattern 1 141 1 with the accounting machine test pattern 
11420 included in the micro-check call response 7002 
in order to verify the electronic telephone card account- 
ing machine 800. The mobile user terminal subtracts 
10 the amount of sales 11419 from the total remaining 
value held by the electronic telephone card in accord- 
ance with the instruction code 1 1418. Then, the mobile 
user terminal decrypts the card test patten using the 
card private key. and generates a telephone micro- 
is check message 7003. which corresponds to a check 
that has as its face value the amount of the charge. The 
check is transmitted via digital wireless telephone com- 
munication to the electronic telephone card accounting 
machine 800 (switching center 105). Further, the mobile 
20 user terminal displays, on the LCD, a message indicat- 
ing a call is on process (display a call on process; 6704) 
[1983] As is shown in Fig. 1 1 5A, the digital signature 
using the card signature private key and the digital sig- 
nature of a user are provided for the data that consists 
25 of a telephone micro-check header 11500. which is 
header information indicating that the message is the 
telephone micro-check 7003 and describing the data 
structure; a micro-check issuing number 11501. which 
indicates the order of the telephone card clearing proc- 
30 ess; a card test pattern 1 1502, which is decrypted; an 
amount of payment 1 1503. which indicates the obtained 
value that is subtracted from the total remaining value; a 
card status 1 1504; a total remaining value 1 1505 avail- 
able after the subtraction; an accounting machine ID 
35 11506; a communication service provider ID 11507; a 
request number 1 1 508; a transaction number 11509; a 
card code 11510; a card ID 1 151 1 ; and an issued time 
1 1512. which indicates the date on which the telephone 
micro-check 7003 was issued. In this fashion, the tele- 
40 phone micro-check 7003 is provided. 

[1984] Upon receiving the telephone micro-check 
7003 at the switching center 105, first, the electronic tel- 
ephone card accounting machine 800 authorizes the 
electronic telephone card by comparing the card test 
45 pattern 11421 with the card test pattern 11502 that is 
included in the telephone micro-check 7003, and exam- 
ines the validity of the contents of the telephone micro- 
check 7003. In the verification process for the validity of 
the telephone micro-check 7003, the electronic tele- 
so phone accounting machine 800 determines whether the 
amount of payment 11503 represented by the tele- 
phone micro-check 7003 is equal to the value of the 
charge Also, the electronic telephone card accounting 
machine 800 determines whether the value obtained by 
ss subtracting the total remaining value 11505 from the 
total remaining value 11407, which represents the 
micro-check call request, is equal to the amount of pay- 
ment 1 1503 represented by the telephone micro-check. 
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Finally, the electronic telephone card accounting 
machine 800 examines the digital signature of the elec- 
tronic telephone card accompanying the telephone 
micro-check 7003. 

[1 985] The switch 80 1 transmits, to the telephone ter- s 
minal 1 15, a call arrival request 7005, which is a mes- 
sage for calling the telephone terminal 115 that 
corresponds to the telephone number 11403. Upon 
receiving the call arrival request 7005. the telephone 
terminal 1 15 outputs a call tone to notify the owner (call 10 
receiver) of the telephone terminal 115 that a call has 
arrived (display the arrival of a call; 7006). When the 
recipient raises the handset (communication operation 
7007), the telephone terminal 115 transmits, to the 
switch 801 , a call response 7008, which is a message to is 
permit the call. 

[1986] When the switch 801 receives the call 
response 7008. the electronic telephone card account- 
ing machine 800 generates a receipt message 7009 
that corresponds to a receipt for the telephone micro- 20 
check 7003 that is paid, and transmits the message to 
the mobile user terminal via digital wireless telephone 
communication. The switch 801 connects the lines of 
the mobile user terminal 1 00 and the telephone terminal 
115, so that the user can communicate with the call 2s 
recipient. 

[1987] As is shown in Fig. 1 15B, the digital signature 
of a merchant is provided for the data that consists of a 
receipt header 11514, which is header information indi- 
cating that the message is the receipt 7009 and describ- 30 
ing the data structure; provided service information 
11515; a card ID 11516; a total receipt value 11517, 
which reflects the same value as the amount of payment 
11503 remitted by the telephone micro-check that is 
received; a request number 11518; a transaction 35 
number 11519; a telephone micro-check issuing 
number 11520; an accounting machine ID 11521; a 
communication service provider ID 11522; and an 
issued time 11523, which indicates the date on which 
the receipt 7009 was issued. In this fashion, the receipt 40 
7009 is provided. 

[1988] The provided service information 1 1515 is text 
information that represents the contents of the commu- 
nication service provided through the telephone card 
clearing process, and corresponds to the specifications 45 
or the statement of accounts for the services that are 
provided. 

[1989] Upon receiving the receipt 7009, the mobile 
user terminal verifies that the total receipt value 1 1517 
is equal to the amount of payment 1 1 503 remitted using so 
the telephone micro-check, registers the receipt 7009 
as usage information in the usage list 1715, and 
changes the display on the LCD to a display indicating 
the connection state (the telephone number used for 
communication, the elapsed communication time and ss 
the total remaining value of an electronic telephone 
card) (display the connection state; 7010). 
[1990] When the mobile user terminal 100 does not 



receive the receipt 7009 after it has transmitted the tel- 
ephone micro-check 7003, for example, when the user 
presses the end switch 306 while the ringing is in 
progress and cancels the call before the receipt 7009 is 
received, the mobile user terminal 100 adds the amount 
of sales 11419 to the total remaining value of the elec- 
tronic telephone card, and returns the value to what it 
was before the subtraction was performed. 
[1991] When the communication time exceeds T, 
instead of the telephone micro-check 7003 having the 
face value V. the electronic telephone accounting 
machine transmits a communication charge message 
701 1 , which is a charge requiring the submission of a 
telephone micro-check having a face value that equals 
a communication fee 2V charged for a communication 
time 2T, to the mobile user terminal via digital wireless 
telephone communication. 

[1 992] As is shown in Fig. 1 1 5C, the digital signature 
of a communication service provider is provided for the 
data that consists of a communication charge response 
header 11524, which is header information indicating 
that the message is the communication charge 701 1 
and describing the data structure; a transaction number 
11515; a request number 11526; a card ID 11527; an 
instruction code 11528; an amount of charge 11529, 
which accesses an additional charge value V; an 
accounting machine ID 11530; a communication serv- 
ice provider ID 1 1 53 1 ; and an issued time 1 1 532, which 
indicates the date on which the communication charge 
701 1 was issued. In this fashion, the communication 
charge 7011 is provided. The transaction number 
11525 is the same as the transaction number 11414 
provided for the micro-check call response 7002, the 
transaction number 11509 for the telephone micro- 
check 7003, and the transaction number 11519 for the 
receipt 7009. 

[1993] Upon receiving the communication charge 
701 1, the mobile user terminal subtracts the amount of 
charge 1 1529 (the additional charge value V) from the 
total remaining value of the electronic telephone card. 
Instead of the telephone micro-check 7003, the mobile 
user terminal generates a telephone micro-check 7012, 
which has a face value of 2V that corresponds to the 
total value subtracted from the total remaining value, 
and transmits it to the electronic telephone accounting 
machine 800 (switching center 105) via digital wireless 
telephone communication. 

[1994] As is shown in Fig. 11 5 A. the data structure of 
the telephone micro-check 7012 is the same as that of 
the telephone micro-check 7003. The amount of pay- 
ment 11503 remitted by the telephone micro-check 
7012 is 2V. which corresponds to the total value sub- 
tracted from the total remaining value, and the total 
remaining value 1 1505 is the total remaining value after 
the amount of charge 1 1529 has been subtracted. 
[1995] The same numbers as are used for the tele- 
phone micro-check 7003 are also employed as the 
micro-check issuing number 1 1501 , the request number 
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11508 and the transaction number 11509 in the tele- 
phone micro-check 7012, which identify the telephone 
micro-check that is issued as the replacement for the 
telephone micro-check 7003. 

[1996] Upon receiving the telephone micro-check 
7012, the electronic telephone card accounting 
machine verifies the validity of the telephone micro- 
check 7012, and generates a receipt message 7013 
that corresponds to a receipt for the telephone micro- 
check 7012 that has been issued and transmits it to the 
mobile user terminal via the digital wireless telephone 
terminal. 

[1 997] During the process of examining the validity o1 
the telephone micro-check 7012, first, the electronic tel- 
ephone card accounting machine 800 ascertains that 
the amount of payment 11503 reflected by the tele- 
phone micro-check 7012 is equal to the total amount 
charged, and ascertains that the result obtained by sub- 
tracting the total remaining value 11505, indicated by 
the telephone micro-check 7012, from the amount of 
stored value 1 1407, indicated by the macro check call 
request, is equal to the total amount of payment 1 1503 
reflected by the telephone micro-check. Then, the 
accounting machine 800 examines the digital signature 
that is provided for the telephone micro-check 7012 
using the electronic telephone card. 
[1 998] As is shown in Fig. 1 1 5A, the data structure of 
the receipt 7013 is the same as that used for the receipt 
7009. The total receipt value 1 1517 of the receipt 7013 
is equal to the amount of payment 1 1503 reflected by 
the telephone micro-check 7012. 
[1999] Upon receiving the receipt 7013, the mobile 
user terminal verifies that the total receipt value 1 1517 
is equal to the amount of payment 1 1503 reflected by 
the telephone micro-check 7012, registers the receipt 
7013, instead of the receipt 7009, as usage information 
in the usage list 1715, and updates the total remaining 
amount of the electronic telephone card that is dis- 
played on the LCD (display the accounts, 7014). 
[2000] When the mobile user terminal 100 does not 
receive the receipt 7013 after it has transmitted the tel- 
ephone micro-check 7012, such as when, for example, 
the communication is terminated before the receipt 
701 3 is received, the mobile user terminal 1 00 adds the 
amount of charge 11529 to the total remaining value of 
the electronic telephone card, and returns the value to 
what it was before the amount of charge 11529 was 
subtracted. 

[2001 J Each time the communication time exceeds NT 
(T is a natural number), instead of the telephone micro- 
check having the face value NV, the electronic tele- 
phone accounting machine 800 transmits a communi- 
cation charge message 7015, which includes a charge 
for a telephone micro-check having as a face value a 
communication fee (N+1)V that is assessed for a com- 
munication time (N+1)T ( to the mobile user terminal via 
digital wireless telephone communication. As is shown 
in Fig. 115C, the data structure of the communication 



charge 7015 is the same as that used for the communi- 
cation charge 7011. 

[2002] The mobile user terminal further subtracts the 
amount of charge 11529 (additional communication 
5 charge value V) from the total remaining value of the 
electronic telephone card, generates a telephone micro- 
check 7016 having a face value of (N+1)V, which corre- 
sponds to the total value subtracted from the total 
remaining value, and transmits it to the electronic tele- 
10 phone card accounting machine 800 (switching center 
105) via digital wireless telephone communication. 
[2003] As is shown in Fig. 1 1 5A, the data structure of 
the telephone micro-check 7016 is the same as that 
used for the telephone micro-check 7003 or 7012. The 
is amount of payment 11503 reflected by the telephone 
micro-check 7016 is (N+1)V, which corresponds to the 
total value subtracted from the total remaining value, 
and the total remaining value 11505 is that which is 
available after the amount of charge 1 1529 has been 
20 subtracted. 

[2004] Upon receiving the telephone micro-check 
7016, the electronic telephone card accounting 
machine 800 examines the validity of the telephone 
micro-check 7016, and generates a receipt message 
25 7017 that corresponds to a receipt for the telephone 
micro-check 7016 that has been paid and transmits it to 
the mobile user terminal via digital wireless telephone 
communication. 

[2005] During the process of examining the validity of 
30 the telephone micro-check 701 6, f irst, the electronic tel- 
ephone card accounting machine 800 ascertains that 
the amount of payment 11503 reflected by the tele- 
phone micro-check 701 6 is equal to the total amount of 
the charge, and ascertains that the result obtained by 
35 subtracting the total remaining value 11505. indicated 
by the telephone micro-check, from the total remaining 
value 1 1 407, indicated by the macro check call request, 
is equal to the total amount of payment 1 1503 reflected 
by the telephone micro-check. Then, the accounting 
40 machine 800 uses the electronic telephone card to 
examine the digital signature that is provided for the tel- 
ephone micro-check 7016. 

[2006] As is shown in Fig. 1 1 5B, the data structure of 
the receipt 701 7 is the same as that used for the receipt 
45 7013. The total receipt value 11517 of the receipt 7017 
is equal to the amount of payment 11503 of the tele- 
phone micro-check 7016, 

[2007] Upon receiving the receipt 7017, the mobile 
user terminal verifies that the total receipt value 11517 
so is equal to the amount of payment 11503 reflected by 
the telephone micro-check 7016, registers the receipt 
7017, instead of the receipt having type same request 
number (the previously registered receipt), as usage 
information in the usage list 1715, and updates the total 
55 remaining amount of the electronic telephone card that 
is displayed on the LCD (display the accounts; 7018). 
[2008] When the mobile user terminal 100 does not 
receive the receipt 7017 after it has transmitted the tel- 
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ephone micro-check 7016, such as when, for example, 
the communication is terminated before the receipt 
7017 is received, the mobile user terminal 100 adds the 
amount of charge 1 1529 transmitted in the communica- 
tion charge message 7015 to the total remaining value 5 
of the electronic telephone card, and returns the value 
to what it was before the amount of charge 11 529 was 
subtracted. 

[2009] When a communication session using the elec- 
tronic telephone card is terminated, the mobile user ter- w 
minal 100 increments the micro-check issue number of 
the electronic telephone card. 

[201 0] At the termination of a communication session, 
the electronic telephone card accounting machine 800 
registers, in the transaction list 3909, the receipt that is 
has been transmitted to the mobile user terminal and 
the corresponding telephone micro-check as history 
information for the telephone card clearing process. 
[2011] The contents of the call arrival request 7005 
and the call response 7008. which are messages 20 
exchanged by the switching center 105 and the tele- 
phone terminal 1 15, depend on the protocol for the line 
connection established between the switching center 
1 05 and the telephone terminal 1 1 5. 
[2012] An explanation will now be given for the con- 25 
tents of messages that are exchanged by the devices 
during the telephone card reference processing. 
[2013] In Fig. 73 are shown procedures for the 
exchange of messages by the devices during the tele- 
phone card reference processing, and in Figs. 88A to 30 
88D and Fig. 1 16B are shown the contents of messages 
that are exchanged during the telephone card reference 
processing. 

[201 4] The telephone card reference processing is not 
performed in accordance with a special processing 35 
sequence, but is performed in the data updating proc- 
ess during which the service providing system updates 
the data in the electronic telephone card accounting 
machine 800. 

[2015] Therefore, for the telephone card reference 40 
process, the procedures for the exchange of messages 
by the electronic telephone card accounting machine 
800 and the service providing system, and the contents 
(data structures) of the messages to be exchanged are 
the same as those employed for the above described 45 
data updating processing. 

[2016] Compressed upload data 8818 in the upload 
data 5704 include a telephone micro-check that is newly 
registered in the transaction list 3909 during the tele- 
phone card clearing process conducted during the so 
period extending from the previous performance of the 
data updating process to the current performance of the 
data updating process. 

[201 7] During the data updating processing, the mer- 
chant processor transmits, to the service manager proc- ss 
essor, a message requesting the reference process be 
performed for the telephone micro-check that is 
uploaded from the electronic telephone card accounting 



machine 800. The service manager processor gener- 
ates a service director processor to form a process 
group for examining the validity of the telephone micro- 
check. 

[201 8] First, the service director processor determines 
whether the accounting machine ID 1 1505 and the com- 
munication service provider ID 11506 in the telephone 
micro-check match the accounting machine ID 5215 of 
the communication service provider and the communi- 
cation service provider ID 5214. Then, the service direc- 
tor processor examines the registered card list 5502 in 
the service director information server 901 to verify that 
the electronic telephone card for which the telephone 
micro-check was issued is registered. The service 
director processor employs the user public key 5519 to 
examine the digital signature of the user that accompa- 
nies the telephone micro-check, and employs the regis- 
tered card certificate to examine the digital signature for 
the telephone card that accompanies the telephone 
micro-check. In addition, the service director processor 
employs the telephone micro-check issuing number 
when examining the matching of the amount of payment 
with the total remaining value, and transmits the result 
of the examination to the merchant processor. As a 
result, the telephone micro-check that is ascertained to 
be valid is registered in the telephone micro-check list 
[201 9] When an error occurs in the process for verify- 
ing the validity of the telephone micro-check, the service 
director processor transmits a message indicating that 
an error occurred in the management system 908. 
[2020] Upon receiving the update data 5705, the elec- 
tronic telephone card accounting machine 800 decom- 
presses the update data 8828 and updates the data in 
the RAM and on the hard disk. 
[2021] If the firm represented by the communication 
service provider differs from that represented by the tel- 
ephone card issuer, and a payment for the communica- 
tion service provider who handles the telephone card is 
made by the telephone card issuer, or if the usage of the 
telephone card is periodically reported to the telephone 
card issuer in accordance with the terms of a contract, 
in accordance with the telephone micro-check that is 
newly registered in the telephone micro-check list, the 
service director processor generates weekly, for exam- 
ple, a usage condition notification 11626, which is a 
message for notifying the telephone card issuer of the 
telephone card usage condition. The telephone card 
issuer processor closes the notification 11626 and 
addresses it to the telephone card issuer, and transmits 
it as a usage report 7300 to the telephone card issuing 
system 109. 

[2022] As is shown in Fig. 1 1 6C, the digital signature 
of a service provider is provided for the data that con- 
sists of a usage report header 11620. which is header 
information indicating that the message is the usage 
report 7300 and describing the data structure; a card ID 
and payment value list 11621 of telephone cards that 
are employed; the communication service provider 
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name 1 1 622 and the communication service provider ID 
1 1 623 of a communication service provider that handles 
the telephone card; a service provider ID 1 1 624; and an 
issued time 11625, which indicates the date on which 
the usage report 7300 was issued. These data are 
closed and addressed to the telephone card issuer, 
thereby providing the usage report 7300. 
[2023] Upon receiving the usage report 7300, the tel- 
ephone card issuing system 109 decrypts it and exam- 
ines the digital signature, and performs such processing 
as making a payment to the merchant. 
[2024] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the telephone card transfer processing. 
[2025] In Fig. 76 are shown procedures for the 
exchange of messages by the devices during the tele- 
phone card transfer processing, and in Figs. 120 A and 
120B, 121 A and 121 B, and 122A and 122C are shown 
the contents of messages that are exchanged during 
the telephone card transfer processing. 
[2026] The telephone card transfer process can be 
performed when the card status 2107 of the electronic 
telephone card indicates the transfer enabled state, 
which is designated by the telephone card issuer when 
issuing a telephone card. 

[2027] In Fig. 76 is shown a case where user A trans- 
fers an electronic telephone card to user B. The proce- 
dures for the exchange of messages by the devices 
belonging to users A and B are the same for infrared 
communication as they are for digital wireless communi- 
cation. The data structures of messages are also the 
same. 

[2028] In Fig. 76. first, when user A performs a tele- 
phone card transfer process 7600, the mobile user ter- 
minal of user A transmits a telephone card transfer offer 
7601, which is a message offering to transfer an elec- 
tronic telephone card, to the mobile user terminal of 
user B. When at this time the mobile user terminals of 
user A and user B are connected, communication 
between user A and user B is performed via digital wire- 
less telephone. When the mobile user terminals are not 
connected, infrared communication is employed. 
[2029] As is shown in Fig. 120A, the digital signature 
of user A is provided for the data consisting of a card 
transfer offer header 12000. which is header information 
indicating that the message is the card transfer offer 
7601 and describing the data structure; a transfer offer 
number 12001 . which is an arbitrarily generated number 
that uniquely represents the telephone card transfer 
process; a presented card 12002 and a card certificate 
12003 for an electronic telephone card to be trans- 
ferred; a card status 12004; a total remaining value 
12005; a card ID 12006; an issued time 12007, which 
indicates the date on which the card transfer offer 7601 
was issued; and a user public key certificate 12009. In 
this fashion, the card transfer offer 7501 is provided. 
The digital signature of the electronic telephone card is 
provided, using the card signature private key, for the 



card status 12004, the variable card information 12005, 
the card ID 12006 and the issued time 12007. 
[2030] The digital signature of the service provider is 
provided for the data that consist of a user public key 
5 header 12010; the user public key 12011 of user A; a 
public key certificate ID 12012, which is ID information 
for the public key certificate; a certificate validity term 
12013; a service provider ID 12014; and a certificate 
issued time 12015. In this fashion, the user public key 
10 certificate 1 2009 is provided. 

[2031 ] Upon receiving the card transfer offer 760 1 , the 
mobile user terminal of user B examines the presented 
card 1 2002, the card certified 1 2003, and the digital sig- 
nature of the service provider and the validity term of 
is the public key certificate 12009. Then, the mobile user 
terminal examines the digital signature of the electronic 
telephone card that is provided for the card status 
12004, the total remaining value 12005. the card ID 
12006 and the issued time 12007, and the digital signa- 
ge ture of user A accompanying the card transfer offer 
7601 , and verifies the contents of the card transfer offer 
7501 . In accordance with the presented card 12002, the 
card status 12004 and the total remaining value 12005, 
the mobile user terminal then displays, on the LCD, the 
25 contents of the electronic telephone card that is to be 
transferred (display the transfer offer; 7602). 
[2032] When user B performs a transfer offer accept- 
ance operation 7603, the mobile user terminal of user B 
transmits, to the mobile user terminal of user A, a card 
30 transfer offer response 7604, which is a response mes- 
sage for the card transfer offer 7601 . 
[2033] As is shown in Fig. 120B, the digital signature 
of user B is provided for the data that consist of a card 
transfer offer response header 12016, which is header 
35 information indicating that the message is the card 
transfer offer response 7604 and describing the data 
structure; an acceptance number 12017; a transfer offer 
number 12018; a card ID 12019; an issued time 12020, 
which indicates the date on which the card transfer offer 
40 response 7604 was issued; and a user public key certif- 
icate 12021. In this fashion, the card transfer offer 
response 7604 is provided. 

[2034] The user pubiickey certificate 12021 isapublic 
key certificate for user B. To provide this certificate 
45 12021, the digital signature of the service provider is 
provided for the data that consist of a user public key 
certificate header 12022; a user public key 12023 for 
user B; a public key certificate ID 12024, which is ID 
information for the public key certificate; a certificate 
so validity term 12025; a service provider ID 12026; and a 
certificate issued time 12027. 
[2035] The acceptance number 12017 is arbitrarily 
generated, by the mobile user terminal of user B, as a 
number that uniquely represents the telephone card 
55 transfer processing. With this number, the mobile user 
terminal of user A is notified as to whether user B has 
accepted the card transfer offer 7601. When user B 
does not accept the card transfer offer 7601 . a value of 
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0 is set as the acceptance number 12017. When user B 
accepts the card transfer offer 7601 . a value other than 
0 is set. 

[2036] Upon receiving the card transfer offer response 
7604, the mobile user terminal of user A displays, on the s 
LCD, the contents of the card transfer offer response 
7604 (display the transfer offer response; 7605). When 
the card transfer offer 7601 is accepted (acceptance 
number 12017 * 0), the mobile user terminal of user A 
examines the digital signature of the service provider of w 
the user public key certificate 12021 and the validity 
term. The mobile user terminal generates a card trans- 
fer certificate 7606, which is a message that corre- 
sponds to a transfer certificate for an electronic 
telephone card to user B, and transmits it to the mobile is 
user terminal of user B. 

[2037] As is shown in Fig. 121A, the digital signature 
of the electronic payment and the digital signature of 
user A are provided for the data that consist of a card 
transfer certificate header 12100, which is header infor- 20 
mation indicating that the message is the card transfer 
certificate 7506 and describing the data structure- a 
presentation card 12101 for an electronic telephone 
card to be transferred; a card status 12102, a total 
remaining value 12103; a transfer offer number 12104; 25 
an acceptance number 12105; a public key certificate 
ID 12106 for the user public key certificate of user B- a 
public key certificate ID 12107 for the user public key 
certificate of user A; a card ID 12108; and an issued 
time 12109, which indicates the date on which the card so 
transfer certificate 7606 was issued. These data are 
closed and addressed to user B, thereby providing the 
card transfer certificate 7606. 

[2038] Upon receiving the card transfer certificate 
7606. the mobile user terminal of user B decrypts it and 35 
examines the digital signature of user A and the one 
accompanying the electronic telephone card. Further, 
the mobile user terminal compares the card ID pre- 
sented by the card transfer offer 7601 with the card ID 
12108. and compares the public key certificate IDs 40 
12106 and 12107 with the public key certificates of 
users B and A to verify the contents of the card transfer 
certificate 7606. The mobile user terminal then gener- 
ates a card transfer receipt 7607, which is a message 
indicating the electronic telephone card has been 45 
received, and transmits the receipt 7607 to the mobile 
user terminal of user A. 

[2039] As is shown in Fig. 121B, the digital signature 
of user B is provided for the data that consist of a card 
transfer receipt header 12115. which is header informa- so 
tion indicating that the message is the card transfer 
receipt 7607 and describing the data structure; a card 
ID 121 1 6; a transfer offer number 121 1 7; an acceptance 
number 121 18; a public key certificate ID 121 1 9 for the 
user public key certificate of user A; a public key certif i- 55 
cate ID 12120 for the user public key certificate of user 
B; and an issued time 12121, which indicates the date 
on which the card transfer receipt 7607 was issued. 



These data are closed and addressed to user A, 
thereby providing the card transfer receipt 7607. 
[2040] Upon receiving the card transfer receipt 7607, 
the mobile user terminal of user A decrypts it, and 
examines the digital signature of user B. Further, the 
mobile user terminal compares the public key certificate 
IDs 12119 and 12120 with the public key certificates of 
users B and A to verify the contents of the card transfer 
receipt 7607. The mobile user terminal then erases the 
transferred electronic telephone card from the card list 
1714, and registers the card transfer recapt 12122 in 
use history 1715. At this time, addresses in the object 
data area at which the transfer offer number, the code 
information indicating the card transfer process, the 
issued time for the card transfer receipt 7607 and the 
card transfer receipt 12122 are stored are assigned to 
the request number 1840 in the use list 1715, the serv- 
ice code 1841, the use time 1842 and the use informa- 
tion address 1843. 

[2041 1 The mobile user terminal of user A displays, on 
the LCD, a message indicating the completion of the 
transfer process (display the transfer process; 7608). 
The process at the mobile user terminal of user A 
(sender) is thereafter terminated. 
[2042] After transmitting the card transfer receipt 
7607, the mobile user terminal of user B displays the 
received card transfer certificate 121 1 1 on the LCD. In 
addition, the mobile user terminal displays a dialogue 
message inquiring whether the transfer process with the 
service providing server (process for downloading the 
received electronic telephone card from the service pro- 
viding system) should be immediately performed (dis- 
play the transfer certificate; 7609). 
[2043] The dialogue message has two operating 
menus: "transfer process request" and "cancel." When 
-cancel" is selected, the transfer process performed 
with the service providing server is canceled, and in the 
process (data updating process) during which the serv- 
ice providing system updates the data in the mobile 
user terminal, an electronic telephone card that has 
been transferred is assigned to the mobile user termi- 
nal. 

[2044] When user B selects "transfer process request" 
(transfer process request operation; 7610), based on 
the card transfer certificate 12111 the mobile user ter- 
minal generates a card transfer request 761 1, which is 
a message requesting that the transfer process be per- 
formed with the service providing system, and transmits 
it to the service providing system via digital wireless tel- 
ephone communication. 

[2045] As is shown in Fig. 1 22A, the digital signature 
of user B is provided for the data that consists of a card 
transfer request header 12200, which is header infor- 
mation indicating that the message is the card transfer 
request 7611 and describing the data structure; a 
decrypted card transfer certificate 12201 (12111); the 
user ID 12202 of user B; and an issued time 12203, 
which indicates the date when the card transfer request 
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761 1 was issued. These data are closed and addressed 
to the service provider, thereby providing the card trans- 
fer request 761 1 

[2046] Upon receiving the card transfer request 761 1 , 
the user processor of user B of the service providing 
system 1 10 decrypts it and examines the digital signa- 
ture, and transmits it to the service manager processor. 
The service manager processor generates a service 
director processor to form a process group for process- 
ing the card transfer request 12204. 
[2047] The service director processor, first refers to 
the user list 5200 and specifies the recipient (user B) 
and the sender (user A) of the transfer process by 
employing the public key certificate IDs 12106 and 
12107 in the card transfer certificate 12201 that is 
included in the card transfer request 12204. The service 
director processor examines the digital signature of the 
user A and the digital signature accompanying the elec- 
tronic telephone card, which are provided for the card 
transfer certificate 12201 , and verifies the validity of the 
card transfer certificate 12201. Following this, the serv- 
ice director processor erases the electronic telephone 
card to be transferred from the card list 4612 of the user 
A that is stored in the user information server 902. Then, 
the service director processor changes the card signa- 
ture private key and card signature public key pair and 
the card certificate for a new key pair and a card certifi- 
cate, and also changes the card status and the total 
remaining value to the card status 1 21 02 and to the total 
remaining value 12103 for the card transfer certificate 
12201. The service director processor generates an 
electronic telephone card received from user A, and 
enters it in the card list 461 2 for the user B. 
[2048] When the electronic telephone card that is to 
be transferred has already been registered, the service 
director processor updates the registered card list 5502 
holding the electronic telephone card. Specifically, the 
user ID 5518, the user public key 5519. the registered 
card certificate address 5520, the telephone micro- 
check list address 5521 and the former user information 
address 5522. all of which are in the registered card list 
5502, are updated (to the information for user B). The 
old information (information for user A) is pointed to at 
the former user information address 5522 as former 
user information 5523.. 

[2049] The service director processor generates a tel- 
ephone card transfer message 12226. which includes 
an electronic telephone card transferred from user A. 
The user processor of user B closes the message 
12226 and addresses it to the user B, and transmits it as 
a telephone card transfer message 7612 to the mobile 
user terminal of user B via digital wireless telephone 
communication. 

[2050] As is shown in Fig. 122C, the digital signature 
of the service provider is provided for the data that con- 
sist of a telephone card transfer header 12219, which is 
header information indicating that the message is the 
card transfer 7612 and describing the data structure; a 



transfer number 12220, which is an arbitrarily generated 
number that represents the transfer process in the serv- 
ice providing system; transfer information 12221; an 
acceptance number 12222; an electronic telephone 
5 card 12223, which is transferred; a service provider ID 
12224; and an issued time 12225, which indicates the 
date when the telephone card transfer message 7612 
was issued. These data are closed and addressed to 
the user B, thereby providing the card transfer message 
7612. 



10 

[2051] The transfer information 12221 is information 
concerning the electronic telephone card transfer proc- 
ess performed by the service providing system, and is 
accompanied by the digital signature of the service pro- 
is vider. The mobile user terminal of user B decrypts the 
received telephone card transfer message 7612 and 
examines the digital signature, registers the electronic 
telephone card 1 2223 in the card list 1 714, and displays 
the electronic telephone card on the LCD (display the 
20 electronic telephone card; 7613). The card transfer 
process is thereafter terminated. 
[2052] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the electronic telephone card installation 
25 processing. 

[2053] In Fig. 79 are shown procedures for the 
exchange of messages by the devices during the elec- 
tronic telephone card installation processing, and in 
Figs 127A and 127B, and 128A and 128B are shown 
30 the contents of messages that are exchanged during 
the electronic payment installation processing. 
[2054] First, when the user performs an electronic tel- 
ephone card installation operation 7900, the mobile 
user terminal generates an electronic telephone card 
35 installation request 7901 . and transmits it to the service 
providing system 110 via digital wireless telephone 
communication. 

[2055] As is shown in Fig. 127 A, the digital signature 
of the user is provided for the data that consists of an 
40 electronic telephone card installation request header 
12700 which is header information indicating that the 
message is the electronic telephone card installation 
request 7901 and describes the data structure; an 
installation card number 12701 and an installation 
45 number 12702, which are entered by a user; a request 
number 12703. which is an arbitrarily generated number 
that uniquely represents the electronic telephone card 
installation process; a user ID 12704; and an issued 
time 12705, which indicates the date when the elec- 
so tronic telephone card installation request 7901 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the electronic tele- 
phone card installation request 7901 . 
[2056] Upon receiving the electronic telephone card 
55 installation request 7901. the user processor of the 
service providing system 1 10 decrypts it and examines 
the digital signature, and transmits it to the service man- 
ager processor. The service manager processor gener- 
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ates a service director processor to form a process 
group for processing the electronic telephone card 
installation request 12706. 

[2057] First, the service director processor refers to 
the installation card list that is indicated by the installa- 
tion card list address 5243 for the telephone card issuer 
list 5205, and specifies a telephone card issuer who 
issues a telephone card that is represented by the 
installation number 12701. The service director proces- 
sor generates a telephone card installation request 
12717, which is a message requesting that the tele- 
phone card issuer issue a telephone card using the 
installation card. The telephone card issuer processor 
closes the request 12717 and addresses it to the tele- 
phone card issuer, and transmits it as a telephone card 
installation request 7902 to the telephone card issuing 
system 108. 

[2058] As is shown in Fig. 127B, the digital signature 
of the service provider is provided for the data that con- 
sist of a telephone card installation request header 
12710, which is header information indicating that the 
message is the telephone card installation request 7902 
and describing the data structure; an installation card 
number 1271 1; an installation number 12712; a request 
number 12713; a customer number 12714, which 
uniquely represents a user for the telephone card 
issuer; a service provider ID 12715; and an issued time 
12716, which indicates the date when the telephone 
card installation request 7902 was issued. These data 
are closed and addressed to the telephone card issuer 
thereby providing the telephone card installation 
request 7902. 

[2059] Upon receiving the telephone card installation 
request 7902, the telephone card issuing system 109 
decrypts it and examines the digital signature. The tele- 
phone card issuing server 1300 compares the installa- 
tion card number 12711 and the installation number 
12712, which are included in the telephone card instal- 
lation request 7902, with the management information 
for the issued electronic telephone card installation card 
that is stored in the telephone card issuing information 
server 1302. The telephone card issuing server 1300 
then updates the data in the customer information 
server 1302 and the telephone card issuing information 
server 1303. Furthermore, the telephone card issuing 
server generates telephone card data (12806) for a 
requested telephone card, and transmits, to the service 
providing system, an electronic telephone card installa- 
tion commission 7903, which is a message requesting 
the installation of an electronic telephone card that cor- 
responds to the requested telephone card. 
[2060] As is shown in Fig. 128A, the digital signature 
of the telephone card issuer is provided for the data that 
consists of an electronic telephone card installation 
commission header 12800, which is header information 
indicating that the message is the electronic telephone 
card installation commission 7903 and describing the 
data structure; a transaction number 12801 , which is an 



arbitrarily generated number that uniquely represents 
the transaction with a user; telephone card issuing infor- 
mation 12802; a request number 12803; card code 
12804, which indicates the type of electronic telephone 
5 card that is to be issued; a template code 12805, which 
indicates a template program for an electronic tele- 
phone card to be issued; telephone card data 12806; 
representative component information 12807; a tele- 
phone card issuer ID 12808; and an issued time 12809, 
70 which indicates the date when the electronic telephone 
card installation commission 7903 was issued. These 
data are closed and addressed to the service provider, 
thereby providing the electronic telephone card installa- 
tion commission 7903. 
is [2061] The telephone card issuing information 1 2802 
is information concerning the telephone card issuing 
process performed by the telephone card issuing sys- 
tem, and is accompanied by the digital signature of the 
telephone card issuer. 
20 [2062] The telephone card data 12806 is telephone 
card information issued by the telephone card issuer, 
wherein the digital signature of the telephone card 
issuer accompanies the data that consists of the card ID 
12814, the telephone card information 12815 and the 
25 card ID 12816. 

[2063] The telephone card issuer processor of the 
service providing system decrypts the received elec- 
tronic telephone card installation commission 7903 and 
examines the digital signature, and transmits the com- 
30 mission 7903 to the service director processor. In 
accordance with the electronic telephone card installa- 
tion commission 12810, the service director processor 
generates an electronic telephone card to be issued to 
a user, using the same procedures as are used for the 
35 telephone card purchase processing, and also gener- 
ates an electronic telephone card installation message 
12815, which is a message directing that the electronic 
telephone card be installed in the mobile user terminal. 
The user processor closes the electronic telephone 
40 card installation message 1 2855 and addressees it to a 
user, and transmits it as an electronic telephone card 
installation message 7904 to the mobile user terminal 
via digital wireless telephone communication. 
[2064] As is shown in Fig. 1 28B, the digital signature 
45 of the service provider is provided for the data that con- 
sists of an electronic telephone card installation header 
12817, which is header information indicating that the 
message is the electronic telephone card installation 
message 7904 and describing the data structure; a 
so transaction number 12818; telephone card issuing infor- 
mation 12819, which concerns the telephone card issu- 
ing process performed by the telephone card issuing 
system; telephone card issuing information 12820, 
which concerns the telephone card issuing process per- 
55 formed by the service providing system; a request 
number 12821; generated electronic telephone card 
data 12822; a service provider ID 12823; and an issued 
time 12824, which indicates the date when the elec- 
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tronic telephone card installation message 7904 was 
issued. These data are closed and addressed to the 
user, thereby providing the electronic telephone card 
installation message 7904. The telephone card issuing 
information 12819 and the telephone card issuing infor- 
mation 12820 are accompanied by the digital signatures 
of the telephone card issuer and the service provider. 
[2065] The mobile user terminal decrypts the received 
electronic telephone card installation message 7904 
and examines the digital signature, registers, in the card 
list 1714, the electronic telephone card included in the 
electronic telephone card installation request 7904, and 
displays the installed electronic telephone card on the 
LCD (display the electronic telephone card; 7905). 
[2066] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the real credit clearing process for electronic 
credit card service. 

[2067] In Fig. 84 are shown procedures for the 
exchange of messages by the devices during the real 
credit clearing processing, and in Figs. 135Ato 135F, 
136A to 136C, and 137A and 137B are shown the con- 
tents of the messages that are exchanged by the 
devices during the real credit clearing processing. 
[2068] First, when the merchant presses the switch on 
the cash register for the credit card clearing (8401), the 
merchant terminal 102 or 103 generates multiple types 
of payment offer responses 8406 and enters the wait 
state for a payment offer 8405. 
[2069] The payment offer responses 8406 are those 
used when an amount of payment entered by a user is 
insufficient, when a credit card or a payment option des- 
ignated by the user is not available, or when the pay- 
ment offer 8405 is accepted. 

[2070] When the user performs a payment operation 
8404, the mobile user terminal 100 generates the pay- 
ment offer 8405 and transits it to the merchant terminal 
102 or 103 via infrared communication. 
[2071] As is shown in Fig. 135A, the digital signature 
of a user is provided for data that consists of a payment 
offer header 13500, which is header information indicat- 
ing that the message is the payment offer 8405 and 
describing the data structure; a payment service code 
13501 . which is a service code used to identify the type 
of electronic credit card designated by a user; a request 
number 13502, which is an arbitrarily generated number 
that uniquely represents the transaction with a mer- 
chant; an amount of payment 13504, which is entered 
by a user; a payment option code 13505, which is a pay- 
ment option, such as the number of payments, entered 
by a user; an effective period 13506 for the payment 
offer 8405; and an issued time 13507, which indicates 
the date on which the payment offer 8405 was issued. 
Thus, the payment offer 8405 is provided. 
[2072] Upon receiving the payment offer 8405. the 
merchant terminal 102 or 103 examines the payment 
service code 13501 , the amount of payment 13504 and 
the payment option 13505, and selects an appropriate 



payment offer response 8406 from among multiple 
types of responses 8406 and transmits it to the mobile 
user terminal via infrared communication. Further, the 
terminal 102 or 103 generates an authorization request 
5 8409 and transmits it to the merchant processor of the 
service providing system 1 10. 
[2073] As is shown in Fig. 135B, the digital signature 
of a merchant is provided for the data that consists of a 
payment offer response header 13508, which is header 
w information indicating that the message is the payment 
offer response 8406 and describing the data structure; a 
response message 13509. which is displayed on the 
LCD 303 when the mobile user terminal 100 receives 
the payment offer response 8406; a transaction number 
is 13510, which is an arbitrarily generated number that 
uniquely represents the transaction with a user; an 
amount of sales 13511; a service provider telephone 
number 13512, which is the telephone number of the 
service providing system in the service area of the mer- 
20 chant; an effective period 13513 for the payment offer 
response 8406; a merchant ID 13514; and an issued 
time 13515, which indicates the date on which the pay- 
ment offer response 8406 was issued. In this fashion, 
the payment offer response 8406 is provided. 
25 [2074] The service provider telephone number 1 351 2 
is accompanied by the digital signature of the service 
provider. The response message 13509 is a text mes- 
sage that is optionally selected by the merchant, and 
may not always be selected. 
30 [2075] When the amount of payment designated by 
the user is insufficient, or when a credit card or a pay- 
ment option entered by the user can not be accepted, 
the merchant terminal sets for the transaction number 
13510 a value of "0." thus notifying the mobile user ter- 
35 minal that the payment offer 8405 can not be accepted. 
[2076] As is shown in Fig. 135C, the digital signature 
of a merchant is provided for the data that consists of an 
authorization request header 13516, which is header 
information indicating that the message is the authon- 
40 zation request 8409 and describing the data structure; a 
payment offer 8405; a payment offer response 8406; an 
accounting machine ID 13517; a merchant ID 13518; 
and an issued time 13519, which indicates the date on 
which the authorization request 8409 was issued. 
45 These data are closed and addressed to the service 
provider, thereby providing the authorization request 

8409. . xl _ 

[2077] The mobile user terminal 1 00 receives the pay- 
ment offer response 8406, compares the amount of 
50 payment 13504 with the amount of sale 1351 1 , gener- 
ates a payment request 8410, and transmits it to the 
user processor of the service providing system via dig- 
ital wireless telephone communication. 
[2078] As is shown in Fig. 135D, the digital signature 
55 of a user is provided for the data that consists of a pay- 
ment request header 13524, which is header informa- 
tion indicating that the message is the payment request 
8410 and describing the data structure; a payment offer 
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8405; a payment offer response 8406; a user ID 13525; 
and an issued time 13526, which indicates the date on 
which the payment request 8410 was issued. These 
data are closed and addressed to the service provider, 
thereby providing the payment request 841 0. 5 
[2079] Either the transmission of the authorization 
request 8409 by the merchant terminal 102 or 103, or 
the transmission of the payment request 8410 by the 
mobile user terminal may be performed first, or the two 
of them may be performed at the same time. w 
[2080] The merchant processor and the user proces- 
sor of the service providing system 110 receive the 
authorization request 8409 and the payment request 
8410, decrypt them and examine the digital signatures, 
and transmit an authorization request 1 3520 and a pay- w 
ment request 13527 to the service manager processor. 
The service manager processor compares the request 
number, the transaction number and the merchant ID to 
obtain a correlation between the authorization request 
and the payment request, and generates the service 20 
director processor to form a process group for handling 
the authorization request 13520 and the payment 
request 13527. The service director processor com- 
pares the contents of the authorization request 13520 
with those of the payment request 13527, authorizes 25 
the user and generates an authorization response 
13540. The merchant processor closes the response 
13540, addresses it to the merchant and transmits it as 
an authorization response 841 1 to the merchant termi- 
nal. 30 
[2081] As is shown in Fig. 135E, the digital signature 
of a service provider is provided for the data that con- 
sists of an authorization response header 13531, which 
is header information indicating that the message is the 
authorization response 8411 and describing the data 35 
structure; a transaction number 13532; an authorization 
number 13533, which is an arbitrarily generated number 
that uniquely represents the authorization processing; 
user personal data 13535; a customer number 13536; 
an effective period 13537, which designates a period 40 
during which the authorization response 841 1 is effec- 
tive; a service provider ID 13538; and an issued time 
1 3539, which indicates the date on which the authoriza- 
tion response 8404 was issued. These data are closed 
and addressed to the merchant, thereby providing the 45 
authorization response 841 1. 

[2082] When, as the result of the authorization proc- 
ess, it is determined that the credit condition of the user 
is not satisfactory, the user personal data 13534 are not 
set. The customer number 13536 is set only when a so 
transaction was previously made between the user and 
the merchant through an electronic commerce service. 
[2083] The merchant terminal 1 02 or 1 03 decrypts the 
received authorization response 8411 and examines 
the digital signature, and displays the results of the 55 
authorization process on the LCD. 
[2084] When an operator (merchant) performs a clear- 
ing request operation 841 3, the merchant terminal gen- 



erates a clearing request 8415 and transmits it to the 
merchant processor. As is shown in Fig. 1 35F, the digital 
signature of a merchant is provided for the data that 
consist of a clearing request header 13544, which is 
header information indicating that the message is the 
clearing request 841 5 and describing the data structure; 
a payment offer 8405; a payment offer response 8406; 
an authorization number 13545, which is issued by the 
service providing system 110; an effective period 
13546, which indicates a period during which the clear- 
ing request 8415 is effective; an accounting machine ID 
13547; a merchant ID 13548; and an issued time 
13549, which indicates the date on which the clearing 
request 8415 was issued. These data are closed and 
addressed to the service provider, thereby providing the 
clearing request 8415. 

[2085] Upon receiving the clearing request 8415, the 
merchant processor of the service providing system 
1 10 decrypts it and examines the digital signature, and 
transmits a clearing request 8450 to the service director 
processor. The service director processor compares the 
clearing request 8450 with the payment request 8427, 
and generates a clearing request 1 361 0 for the transac- 
tion processor. The transaction processor processor 
closes the request 13610. addresses it to the transac- 
tion processor, and transmits it as a clearing request 
8416 to the transaction processing system. 
[2086] As is shown in Fig. 136A, the digital signature 
of a service provider is provided for data that consist of 
a clearing request header 13600, which is header infor- 
mation indicating that the message is the clearing 
request 8416 and describing the data structure; a user 
clearing account 13601, which indicates a credit card 
that corresponds to the payment service code desig- 
nated by the user; a request number 13602, which is 
issued by the mobile user terminal 100; an amount of 
payment 13603; a payment option code 13604; a mer- 
chant clearing account 13605. which indicates a clear- 
ing account for the merchant; a transaction number 
13606, which is issued by the merchant terminal; an 
effective period 13607, which indicates the period 
wherein the clearing request 8416 is effective; a service 
provider ID 13608; and an issued time 13609, which 
indicates the date on which the clearing request 8416 
was issued. These data are closed and addressed to 
the transaction processor, thereby providing the clear- 
ing request 8416. 

[2087] The transaction processing system 106 
receives the clearing request 8416, decrypts it and 
examines the digital signature, and performs the clear- 
ing process. Then, the transaction processing system 
106 generates a clearing completion notification 8417 
and transmits it to the service providing system 1 10. 
[2088] As is shown in Fig. 136B, the digital signature 
of a transaction processor is provided for data that con- 
sist of a clearing completion notification header 13614, 
which is header information indicating that the message 
is the clearing completion notification 841 7 and describ- 
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ing the data structure; a clearing number 13615, which 
is an arbitrarily generated number that uniquely repre- 
sents the clearing process performed by the transaction 
processing system 106; a user clearing account 13616; 
a request number 1 361 7; an amount ol payment 1 3618; 
a payment option code 13619; a merchant clearing 
account 13620; a transaction number 13621; clearing 
information 13622 for a service provider that is accom- 
panied by the digital signature of the transaction proces- 
sor; clearing information 13623 for a merchant that is 
accompanied by the digital signature of the transaction 
processor; clearing information 13624 for a user that is 
accompanied by the digital signature of the transaction 
processor; a transaction processor provider ID 13625; 
and an issued time 13626. which indicates the date on 
which the clearing completion notification was issued. 
These data are closed and addressed to the service 
provider, thereby providing the clearing completion noti- 
fication 8417. 

[2089] Upon receiving the clearing completion notifi- 
cation 841 7, the transaction processor processor of the 
service providing system 110 decrypts it and examines 
the digital signature, and transmits a clearing comple- 
tion notification 13627 to the service director processor. 
Upon receiving the clearing completion notification 
13627, the service director processor generates a 
clearing completion notification 13637 for the merchant. 
The merchant processor closes the clearing completion 
notification 13637, addresses it to the merchant, and 
transmits it to the merchant terminal as a clearing com- 
pletion notification 8418 for the merchant. 
[2090] As is shown in Fig. 136C, the digital signature 
of a service provider is provided for data that consist of 
a clearing completion notification header 13631, which 
is header information indicating that the message is the 
clearing completion notification 841 8 and describing the 
data structure; a clearing number 13632; clearing infor- 
mation 1 3623 for a merchant that is accompanied by the 
digital signature of the transaction processor; a cus- 
tomer number 13633. which is an arbitrarily generated 
number that uniquely represents a user for a merchant; 
a decrypted clearing request 13550; provided service 
information 13634, which concerns the process per- 
formed by the service providing system 1 10; a service 
provider ID 13635; and an issued time 13636. which 
indicates the date on which the clearing completion 
notification 8418 was issued. These data are closed 
and addressed to the merchant thereby providing the 
clearing completion notification 8418. The provided 
service information 13634 is set optionally by the serv- 
ice provider, and may not always be set. 
[2091] Upon receiving the clearing completion notifi- 
cation 8418. the merchant terminal decrypts it and 
examines the digital signature, and generates a receipt 
841 9 and transmits it to the merchant processor. 
[2092] As is shown in Fig. 137 A, the digital signature 
of a merchant is provided for data that consist of a 
receipt header 13700, which is header information indi- 



cating that the message is the receipt 841 9 and describ- 
ing the data structure; an item name 13701, which 
indicates a product that is sold; sales information 
13702, which is additional information concerning the 
s transaction transmitted by the merchant to the user; a 
clearing number 13703; transaction information 13704; 
a payment offer 8405; an accounting machine ID 1 3705; 
a merchant ID 13706; and an issued time 13707. which 
indicates the date on which the receipt 8419 was 
10 issued. These data are closed and addressed to the 
service provider, thereby providing the receipt 8419. 
The sales information 13702 is set optionally by the 
merchant, and may not always be set 
[2093] Upon receiving the receipt 8419, the merchant 
is processor of the service providing system 1 10 decrypts 
it and examines the digital signature, and transmits a 
receipt 13708 to the service director processor. The 
service director processor employs the receipt 13708 to 
generate a receipt 13717 for a user. The service director 
20 processor closes the receipt 1371 7 and addresses it to 
the user, and transmits it as a receipt 8421 to the mobile 
user terminal 100 via digital wireless telephone commu- 
nication. 

[2094] As is shown in Fig. 137B, the digital signature 
25 of a service provider is provided for data that consist of 
a receipt header 13712, which is header information 
indicating that the message is the receipt 8421 and 
describing the data structure; a user ID 13713; a 
decrypted receipt 13708; clearing information 13709 for 
30 a user that is accompanied by the digital signature of 
the transaction processor; provided service information 
13714, which concerns the process performed by the 
service providing system 110; a service provider ID 
13715; and an issued time 13716, which indicates the 
35 date on which the receipt 8421 was issued. These data 
are closed and addressed to the user, thereby providing 
the receipt 8421. The provided service information 
13713 is set optionally by the service provider, and may 
not always be set. 
40 [2095] Upon receiving the receipt 8421, the mobile 
user terminal 100 decrypts it and examines the digital 
signature, and displays the contents on the LCD 303. 
The real credit clearing process is thereafter termi- 
nated. 

45 [2096] In the mobile user terminal 100. the ROM 1501 
and the EEPROM 1503 may be replaced by ferroelec- 
tric nonvolatile memory as a memory device for storing 
a program executed by the CPU 1 500 and the public key 
of the service provider. This memory device can store 
so data without a battery being required, while like EEP- 
ROM or flash memory, data can be written to it. In addi- 
tion, the reading and writing speeds of the ferroelectric 
nonvolatile memory are higher than those of EEPROM 
and flash memory, and the power consumption is low. 
[2097] When the ferroelectric nonvolatile memory is 
employed instead of the ROM 1501 and the EEPROM 
1503, in the same manner, for example, as in the data 
updating process, the program for the mobile user ter- 
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minal 100 can be extensively updated, and the public 
key of the service provider can be periodically updated 
within a comparatively short period of time with little bat- 
tery service life loss. 

[2098] Furthermore, a ferroelectric nonvolatile mem- s 
ory may be used as the RAM 1 502 to store the data that 
are to be processed and the data that are processed by 
the CPU 1500. Since data are not lost even when the 
battery power has been exhausted, a data backup proc- 
ess is not required, and the power supply required for w 
storing the data resident in the RAM is not needed. As a 
result, the power consumed by the mobile user terminal 
can be reduced. 

[2099] Also, a ferroelectric nonvolatile memory may 
used instead of the ROM 3001 and the EEPROM 3003 75 
in the merchant terminal 103, or the RAM 3002. In this 
case, the same effects are acquired as are obtained 
with the mobile user terminal 100. 
[2100] In the above explanation, the mobile user ter- 
minal 100, the gate terminal 101 and the merchant ter- 20 
minals 102 and 103, which together constitute the 
mobile electronic commerce system, include an optimal 
hardware arrangement with which to implement the 
individual functions needed to provide the mobile elec- 
tronic commerce service. These components can be 25 
constituted by a wireless telephone communication 
function, an infrared communication function, and a 
computer that comprises a display device, a keyboard 
(or an input pen), a microphone and a loudspeaker, and 
that further comprises a bar code reader for the mer- 30 
chant terminal 103. 

[2101] In this case, functionally corresponding hard- 
ware components of the mobile user terminal 100, the 
gate terminal 101, or the merchant terminal 102 or 103 
are modified for inclusion in a program for the hardware 35 
components that are not included in the computer (e.g., 
a data codec, a cryptographic processor and a logic 
control unit). This program, together with a program 
stored in the ROM 1501 (or 2201, 2601 or 3001), is con- 
verted so that it can be operated by the OS (Operating 40 
System) of a personal computer. The resultant program 
is then stored at a location (e.g., on a hard disk) where 
it can be accessed by the computer. 
[21 02] A second embodiment of the present invention 
will now be described while referring to Figs. 139 and 45 
140. 

[2103] In the mobile electronic commerce system in 
the second embodiment, instead of the EEPROM 1503 
an SIM (Subscriber Identify Module) card is employed 
for the mobile user terminal 1 00 in the first embodiment, so 
[2104] Figs. 139A and 139B are a front view and a 
rear view of a mobile user terminal 1 3900 for the second 
embodiment, and Fig. 140 is a block diagram illustrating 
the arrangement of the mobile user terminal 1 3900. The 
arrangement of the mobile user terminal 13900 is the ss 
same as that of the mobile user terminal 100, except 
that an SIM card 14000 and an SIM card reader/Writer 
14001 are provided instead of the EEPROM 1503. The 



external appearance of the mobile user terminal 13900 
is also the same as that of the mobile user terminal 100, 
except that an SIM card attachment section 13901 is 
provided on the reverse side for attaching the SIM card 
14000. 

[21 05] The same information as is stored in the EEP- 
ROM 1503 in the first embodiment is stored in the non- 
volatile memory of the SIM card 149000: the terminal ID 
and the telephone number of the mobile user terminal 
13900 when used as a wireless telephone terminal; a 
user ID; a user code number; a private key and a public 
key used for a digital signature; a service provider ID; 
the telephone number of the service providing system 
110 (which is accompanied by the digital signature of 
the service provider); and the public key of the service 
provider. 

[21 06] The SIM card 1 4000 can be carried separately 
from the mobile user terminal 13900. But without the 
SIM card 14000, if it has been removed, the mobile user 
terminal 13900 can not be operated. When the SIM 
card 14000 is attached to the SIM card reader/writer 
1 4001 , the CPU 1 500 of the mobile user terminal 1 3900 
accesses the information stored on the SIM card 14000 
via the SIM card reader/writer 14001 and a bus 1529. 
The mobile user terminal 13900 then performs the 
same operations as does the mobile user terminal 100 
in the first embodiment. 

[2107] Further, to remove the SIM card 14000 from 
the mobile user terminal 13900, the following operation 
must be performed. 

[21 08] First, when a user depresses the power switch 
and holds it down for five seconds (removal operation 1 
for the SIM card 1 4000), the mobile user terminal 13900 
displays, on the LCD 303, a dialogue message request- 
ing confirmation that the SIM card will be removed. 
Then, when the user depresses the execution switch 
(removal operation 2 for the SIM card 14000), the 
mobile user terminal 13900 performs a data updating 
process with the service providing system 110, and 
uploads the data from the RAM 1502 of the mobile user 
terminal 13900 to the user information server 902. 
When the user removes the SIM card 14000 from the 
SIM card reader/writer 14001 (removal operation 3 for 
the SIM card 14000), the mobile user terminal 13900 
deletes all the data held in the RAM 1502. 
[2109] Specifically, when the SIM card is removed 
from the mobile user terminal, the data, such as those 
for the electronic ticket and electronic payment card, 
that are stored in the RAM of the mobile user terminal 
are uploaded to the user information server 902 of the 
service providing system 110. 
[21 1 0] The following operation is performed when the 
SIM card 14000 is attached to the mobile user terminal 
13900. 

[2111] When the SIM card 1 4000 is connected to the 
SIM card reader/Writer 14001, the mobile user terminal 
13900 displays, on the LCD 303, a screen which per- 
mits the entry of a code number. When the user enters 
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the code number and presses the execution switch, the 
code number stored in the nonvolatile memory of the 
SIM card 1 4000 is compared with the code number that 
was entered. When the two numbers do not match, the 
mobile user terminal 13900 again displays on the LCD 
303 which permits the entry of the code number. When 
the two code numbers match, access to the SIM card 
14000 is permitted. The mobile user terminal 13900 
reads, from the SIM card 14000, the user ID, the private 
key used for the digital signature, the telephone number 
of the service providing system 1 10 and the public key 
of the service provider, and performs a data updating 
process with the service providing system 1 10 in order 
to update the data in the RAM 1502 of the mobile user 
terminal 1 3900. At this time, the data for the mobile user 
terminal in the user information server 902 are stored in 
the RAM 1502 of the mobile user terminal 13900, in 
accordance with the user ID stored on the SIM card 
14000. 

[21 1 2] Specifically, the data for the mobile user termi- 
nal, such as the data for the electronic ticket or for the 
electronic payment card that are uploaded to the user 
information server 902 of the service providing system 
110, are downloaded to the mobile user terminal to 
which the SIM card is attached. When, for example, an 
SIM card is attached to a mobile user terminal that dif- 
fers from the mobile user terminal to which the SIM card 
was previously attached, the same data as those stored 
in the RAM of the mobile user terminal to which the SIM 
card was previously attached are stored in the RAM of 
the mobile user terminal to which the SIM card is cur- 
rently attached. 

[2113] Therefore, the user can carry the SIM card 
14000 on which the user ID is stored, and can employ 
an arbitrary mobile user terminal as his or her own by 
attaching the SIM card to that mobile user terminal. 
[2114] In the mobile user terminal 13900, not only the 
areas used for storing the user ID and the code number, 
but also areas that correspond to the basic program 
area 1700 of the RAM 1502, the service data area 
1701 , the user area 1702 and the temporary area 1704 
may be provided for the nonvolatile memory of the SIM 
card 14000, so that the data stored in these areas in the 
RAM 1502 may be stored in the nonvolatile memory of 
the SIM card 14000. In this case, the data for the elec- 
tronic ticket or the electronic payment card are stored in 
the nonvolatile memory of the SIM card 14000, and the 
RAM 1 502 is a work area that is used by the CPU 1 500 
when executing a program. 

[2115] Since the data stored in the RAM 1502, other 
than in the work area 1703 of the mobile user terminal 
100 of the first embodiment, are held in the nonvolatile 
memory of the SIM card 14000, the data updating proc- 
ess, which is performed when the SIM card is attached 
and removed, is not required, and as a power source for 
holding data is also not required, the power consumed 
by the mobile user terminal can be reduced. 
[2116] A ferroelectric memory may be used as the 



nonvolatile memory for the SIM card 14000. Since the 
reading and writing speeds of the ferroelectric nonvola- 
tile memory are higher than are those of EE PROM and 
flash memory, and since the power consumption is low, 
5 the processing speed of the mobile user terminal can be 
increased and its power consumption can be reduced. 
[21 1 7] A third embodiment will now be described while 
referring to Figs. 141 to 143. 

[2118] According to the third embodiment, a mobile 
10 electronic commerce system is provided that includes 
an IC card reader/writer and that employs, as a mobile 
user terminal, a portable wireless telephone terminal 
wherein an electronic ticket, an electronic payment card 
or an electronic telephone card that the user obtains is 
is stored in an IC card loaded into the telephone terminal. 
[2119] Figs. 141 A and 141B are a front view and a 
rear view of a mobile user terminal 14100 according to 
the third embodiment and Fig. 142 is a block diagram 
illustrating the arrangement of the mobile user terminal 
20 141 00. The external appearance of the mobile user ter- 
minal 13900 is the same as that of the mobile user ter- 
minal 100, except that an ICcard insertion slot 14101 is 
formed in the reverse side for loading the IC card 1 41 00. 
The arrangement of the mobile user terminal 14100 is 
25 the same as that of the mobile user terminal 100, except 
that the cryptographic processor 1505 is replaced by an 
IC card reader/writer 14200. When the IC card 14102 is 
loaded into the IC card reader/writer 14200, the mobile 
user terminal 14100 performs the same operations as 
so does the mobile user terminal 100 in the first embodi- 
ment for the other devices, such as the service provid- 
ing system 110, the gate terminal 101, the merchant 
terminals 102 and 103, the automatic vending machine 
104 and the switching center 105. 
35 [21 20] It should be noted that the mobile user terminal 
14100 performs the following operation when the IC 
card 14102 is loaded therein. 

[2121] When the IC card 14102 is loaded in the IC 
card reader/writer 14200, the mobile user terminal 
40 14100 displays, on the LCD 303. a screen permitting 
the entry of a code number. When the user enters the 
code number and presses the execution switch, the 
code number stored in the IC card 14102 is compared 
with the code number that was entered. When the two 
45 numbers do not match, the mobile user terminal 1 41 00 
again displays, on the LCD 303, the screen permitting 
the entry of a code number. When the two code num- 
bers match, access to the IC card 141 02 is permitted. 
[21 22] For the mobile user terminal 1 41 00, the user ID 
so and the user code number, the private key and the pub- 
lic key used for a digital signature, the service provider 
ID, the telephone number of the service providing sys- 
tem 1 10 and the public key of the service provider are 
stored in the IC card 14102, while the terminal ID and 
55 the telephone number of the mobile user terminal 
14100 when used as a wireless telephone terminal are 
stored in the EEPROM 1503. 

[21 23] In addition, an additional program and the data 
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for the electronic ticket or the electronic payment card, 
which are stored in the basic program area 1700, the 
service data area 1701, the user area 1702 and the 
temporary area 1704 in the RAM 1502 of the mobile 
user terminal 1 00 of the first embodiment, are stored on 
the IC card 14102 of the mobile user terminal 14100. 
The RAM 1502 of the mobile user terminal 14100 
serves as a work area that is used by the CPU 1500 
when executing a program. 

[2124J Furthermore, the mobile user terminal 14100 
employs the IC card 14100 loaded into the IC card 
reader/Writer 14200 to perform one part of the data 
processing for the messages that are exchanged with 
the service providing system 1 10, the gate terminal 1 01 , 
the merchant terminals 102 and 103, the automatic 
vending machine 104 or the switching center 105 for the 
mobile electronic commerce service. 
[2125] Fig. 143 is a block diagram illustrating the 
arrangement of the IC card 14102. 
[2126] The IC card 14102 includes two interfaces, one 
for a contact type IC card and one for a non-contact IC 
card. This IC card comprises: a CPU (Central Process- 
ing Unit) 14300, which processes data to be transmitted 
and data that are received in accordance with a pro- 
gram stored in a ROM (Read Only Memory) 14301 , and 
which controls the other components across a bus 
14318; a RAM (Random Access Memory) 14302, in 
which are stored data that are to be processed and that 
are being processed by the CPU 14300; an FeRAM 
(Ferroelectric Random Access Memory) 14303, in 
which are stored a user ID and a code number for a 
user, a private key and a public key for a digital signa- 
ture, a service provider ID, the telephone number of the 
service providing system 1 1 0, the public key of the serv- 
ice provider, and an additional program or data such as 
those for an electronic ticket or for an electronic pay- 
ment card, which are stored in the basic program area 
1700. the service data area 1701, the user area 1702 
and the temporary area 1704 of the RAM 1502 for the 
first embodiment; a cryptographic processor 14304, 
which encrypts or decrypts data under the control of the 
CPU 14300; an input/output circuit 14305, which con- 
verts and controls a signal that is irput or output at a 
contact 14306 of a non-contact IC card under the con- 
trol of the CPU 14300; and an RF modem 14307, which 
converts and controls radio waves that are input or out- 
put by an antenna 14308 of a non-contact IC card under 
the control of the CPU 14300. 

[2127] The cryptographic processor 1 4304, which cor- 
responds to the cryptographic processor 1505 of the 
mobile user terminal 1O0 in the first embodiment, 
includes an encryption and decryption function that 
uses a secret key method and an encryption and 
decryption function for a public key system. The crypto- 
graphic processor 14304 employs the cryptograph 
method and keys that are set by the CPU 14300 to 
encrypt or decrypt data as designated by the CPU 
14300. The cryptographic function of the cryptographic 



processor 1 4304 is employed for the process for provid- 
ing a digital signature for a message or the process for 
closing the message, and the process for decrypting the 
closed message or the process for verifying a digital sig- 
s nature accompanying the message. 

[2128] To transmit, via a digital wireless telephone 
communication, a message that is closed and is accom- 
panied by a digital signature, first, the CPU 14300 
employs the cryptographic processor 14304 to perform 
10 the digital signature provision process and the message 
closing process, and transmits the resultant message to 
the input/output circuit 14305. The message, which is 
closed and is accompanied by the digital signature, is 
converted into an electric signal by the input/output cir- 
15 cuit 14305, and the electric signal is output at the con- 
tact point 14306. Through the IC card reader/writer 
14200 and the bus 1529, the CPU 1500 reads, as a 
message, the electric signal that is output at the contact 
14306. The CPU 14300 employs the data codec 1506 
20 to encode the message that is closed and accompanied 
by the digital signature to obtain a data form for digital 
wireless telephone communication, and transmits the 
coded message via the control logic unit 1508 to the 
channel codec 1513. 
25 [21 29] When a message that is closed and is accom- 
panied by a digital signature is received via digital wire- 
less telephone communication, the CPU 1500 reads the 
received message from the channel codec 1513 
through the control logic unit 1508, employs the data 
30 codec 1506 to decrypt the received message, and 
transmits the decrypted message to the IC card 14102 
via the bus 1529 and the IC card reader/writer 14200. 
The CPU 14300 receives a message via the contact 
point 14306 and the input/output circuit 14305, and 
35 employs the cryptographic processor 14304 to decrypt 
the closed and encrypted message and to examine the 
digital signature accompanying the message. 
[2130] Similarly, to transmit via infrared communica- 
tion a message that is closed and is accompanied by a 
40 digital signature, first, the CPU 1 4300 employs the cryp- 
tographic processor 14304 to perform the digital signa- 
ture provision process and the message closing 
process, and transmits the resultant message to the 
input/output circuit 14305. The message that is closed 
45 and is accompanied by the digital signature is converted 
into an electric signal by the input/output circuit 14305, 
and tiie electric signal is output at the contact point 
14306. Through the IC card reader/writer 14200 and the 
bus 1529, the CPU 1500 reads, as a message, the elec- 
so trie signal that is output at the contact 14306. The CPU 
14300 employs the data codec 1506 to encode the 
message that is closed and is accompanied by the dig- 
ital signature to obtain a data form for infrared commu- 
nication, and transmits the coded message to the 
55 infrared communication module 1507. 

[21 31] When a message that is closed and is accom- 
panied by a digital signature is received via infrared 
communication, the CPU 1500 reads the received mes- 
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sage from the infrared communication module 1507, 
employs the data codec 1506 to decrypt the received 
message, and transmits the decrypted message to the 
IC card 14102 via the bus 1529 and the IC card 
reader/writer 14200. The CPU 14300 receives a mes- 
sage via the contact point 14306 and the input/output 
circuit 14305, and employs the cryptographic processor 
14304 to decrypt the closed and encrypted message 
and to examine the digital signature accompanying the 
message. 

[2132] In Fig. 144 is shown a memory map for the 
FeRAM 14303. The FeRAM 14303 includes five areas: 
a security area 14400. a basic program area 14401, a 
service data area 14402, a user area 14403 and a tem- 
porary area 14403. The security area 14400 is used to 
store a user ID, a user code number, a private key and 
a public key for a digital signature, a service provider ID, 
the telephone number of the service providing system 
(that is accompanied by the digital signature of the serv- 
ice provider), and the public key of the service provider. 
The basic program area 14401, the service data area 
14402, the user area 14403 and the temporary area 
14404 correspond to the basic program area 1700, the 
service data area 1701. the user area 1702 and the 
temporary area 1704 in the RAM 1502 of the mobile 
user terminal 100 for the first embodiment, and the 
same data are stored in these areas as are stored in the 
first embodiment. That is, all the information used for the 
mobile electronic commerce service, such as the user 
ID, the keys for the digital signature, or the electronic 
ticket or the electronic payment card that the user 
obtained, are stored on the IC card 14102. 
[2133] Therefore, the user can carry the IC card 
14102 in which the user ID is stored, and can perform 
the electronic commerce service function, while using 
an arbitrary mobile user terminal that is regarded as his 
or her own, by loading the IC card 14102 into that 
mobile user terminal. 

[2134] In addition, since the mobile user terminal 
14100 can not access the IC card 14102 when it is not 
loaded, the mobile user terminal 14100 can not process 
message data obtained through the mobile electronic 
commerce service. Therefore, in this case, the mobile 
electronic commerce service function of the mobile user 
terminal 100 can not be employed, and only the digital 
wireless telephone function can be used. 
[2135] In Fig. 141C is shown the screen that is dis- 
played on the LCD 303 in the digital wireless telephone 
mode when the IC card 14102 is not loaded, and in Fig. 
141 D is shown the screen that is displayed on the LCD 
303 in the credit card mode when the IC card 14102 is 
loaded. 

INDUSTRIAL USABILITY 



[2136] As is apparent from the above description, the 
mobile electronic commerce system according to the 
present invention can download to the electronic wallet 



an electronic negotiable card, such as a payment card, 
a telephone card or a ticket, through the communication 
means, and can easily obtain such a card. When the 
electronic payment card, the electronic telephone card 
5 or the electronic ticket is to be used, the settlement 
process or the examination process is quickly and pre- 
cisely performed, so that safety and usability for a busi- 
ness transaction can be provided. 
[2137] The performance of an illegal activity during a 
w business transaction can be prevented, and the secrecy 
of personal information can be maintained. 
[2138] The electronic payment card, the electronic tel- 
ephone card and the electronic ticket can be delivered 
along a distribution route as a form of printed matter or 
is as a recording medium, and wide distribution if possible. 
[2139] In addition, the usability in the mobile environ- 
ment can be improved, and, particularly in the invention 
cited in claims 24 and 25, a system appropriate to the 
environment in which it is to be used can be obtained. 
20 [2140] According to the invention cited in claim 27, 
cash is not required to purchase a product from an auto- 
matic vending machine, and the usability can be 
improved. 

[21 41 ] According to the invention cited in claim 28, the 
25 operator is able to manipulate the electronic payment 
card clearing means and to present, to a person in 
charge, the data stored in the electronic payment card 
clearing means. Thus, the usability of the electronic 
payment card clearing means is improved. 
30 [2142] According to the invention cited in claim 30, 
since the calculation of the price of a product and the 
settlement process can be preformed, the usability is 
improved. 

[2143] According to the invention cited in claim 31. 
35 since the process beginning with the promotion of a 
product an continuing until the product is sold is auto- 
mated, the usability is improved. 
[21 44] According to the invention cited in claim 32, the 
provision of a communication service and the collection 
40 of a communication charge for that service can be per- 
formed at the same time, and the collection rate for the 
communication charge can be improved. 
[2145] According to the invention cited in claim 33, the 
operator is able to operate the electronic ticket means 
45 and to present, to a person in charge, the data stored in 
the electronic ticket means. Thus, the usability of the 
electronic ticket means is improved. 
[2146] According to the invention cited in clam 34, the 
service providing means can efficiently manage the 
so electronic wallet and the electronic payment card clear- 
ing means, and can provide the electronic payment card 
service, the electronic telephone card service and the 
electronic ticket service. 

[2147] According to the invention cited in claim 35, the 
55 settlement means can eff iciently perform the settlement 
means. 

[2148] According to the invention cited in claim 36. the 
payment card issuing means can efficiently issue a pay- 
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ment card. 

[2149] According to the invention cited in claim 37, the 
telephone card issuing means can efficiently issue a tel- 
ephone card. 

[21 50] According to the invention cited in claim 38, the 
ticket issuing means can efficiently issue a ticket. 
[21 51 ] According to the invention cited in claim 39, the 
owner of the electronic wallet purchases, as an elec- 
tronic payment card, a payment card that is issued by 
the payment card issuing means, and can download the 
payment card to the electronic wallet and use it. Thus, 
the usability is improved. 

[2152] According to the invention cited in claim 40, 
since the owner of the electronic wallet designates the 
amount of a payment, an illegal act by a store can be 
prevented. 

[21 53] According to the invention cited in claim 4 1 , the 
owner of the electronic wallet can confirm the contents 
of a trading session, and as a statement of account 
printed on paper need not be exchanged, a sale can be 
handled more efficiently. 

[21 54] According to the invention cited in claim 42, the 
owner of an electronic wallet can purchase anywhere, 
as an electronic telephone card, a telephone card that is 
issued by the telephone card issuing means, and can 
use the telephone card by downloading it to the elec- 
tronic wallet. Thus, the usability is improved. 
[2155] According to the invention cited in claim 43, a 
wireless communication service using a payment card 
clearing method can be received, and the usability is 
improved. 

[21 56] According to the invention cited in claim 44, the 
owner of an electronic wallet can confirm the contents of 
the wireless communication service that is employed. 
[21 87] According to the invention cited in claim 45. the 
owner of an electronic wallet can purchase anywhere, 
as an electronic ticket, a ticket that is issued by the ticket 
issuing means, and can use the ticket by downloading it 
to the electronic wallet. Thus, the usability is improved. 
[2158] According to the invention cited in claims 47 
and 48, the ticket can be examined accurately and effi- 
ciently. 

[2159] According to the invention cited in claim 49. 
since an electronic payment card can be transferred to 
another person, the usability is improved. 
[2160] According to the invention cited in claim 50, an 
electronic payment card can be precisely transferred 
and trouble that may accompany the transfer can be 
prevented. 

[2161] According to the invention cited in claim 51, 
since an electronic telephone card can be transferred to 
another person, the usability is improved. 
[21 62] According to the invention cited in claim 52, an 
electronic telephone card can be precisely transferred 
and trouble that may accompany the transfer can be 
prevented. 

[2163] According to the invention cited in claim 53, 
since an electronic ticket can be transferred to another 



person, the usability is improved. 
[21 64] According to the invention cited in claim 54. an 
electronic ticket can be precisely transferred and trouble 
that may accompany the transfer can be prevented. 
s [21 65] According to the invention cited in claim 55, the 
owner of an electronic wallet can install an electronic 
payment card in the electronic wallet anywhere. 
[21 66] According to the invention cited in claim 56. an 
electronic payment card that the owner of the electronic 
10 wallet designates can be installed in the electronic wal- 
let anywhere. 

[21 67] According to the invention cited in claim 57, the 
owner of the electronic wallet can install an electronic 
telephone card in the electronic wallet anywhere. 
15 [21 68] According to the invention cited in claim 58, an 
electronic telephone card that the owner of the elec- 
tronic wallet designates can be installed in the elec- 
tronic wallet anywhere. 

[21 69] According to the invention cited in claim 59, the 
20 owner of the electronic wallet can install an electronic 
ticket in the electronic wallet anywhere. 
[21 70] According to the invention cited in claim 60, an 
electronic ticket that the owner of the electronic wallet 
designates can be installed in the electronic wallet any- 
25 where. 

[21 71 ] According to the invention cited in claim 61 , an 
illegal installation due to immorality can be prevented. 
[2172] According to the invention cited in claim 62. a 
maximum one hundred million types of electronic pay- 
30 ment cards, electronic telephone cards and electronic 
tickets, and 10 to the 32nd power of cards or tickets of 
for each type can be identified by simple numerical 
entry. 

[21 73] According to the invention cited in claim 63. the 
35 owner of the electronic wallet can reduce the communi- 
cation costs for a purchase, and can also receive, as a 
gift, an electronic payment card, an electronic telephone 
card or an electronic ticket. As a result, the distribution 
and employment of an electronic payment card, an elec- 
40 tronic telephone card or an electronic ticket can be 
accelerated. 

[21 74] According to the invention cited in claim 64, the 
distribution and employment of the electronic payment 
card, the electronic telephone card or the electronic 
45 ticket can be accelerated. 

[21 75] According to the invention cited in claim 65, the 
contents of a ticket that has been issued can be 
changed at a low cost. 

[21 76] According to the invention cited in claim 66, the 
so modification of the contents of an event can be reported 
to the owner of the electronic ticket, and the electronic 
ticket can be updated. 

[21 77] According to the invention cited in claim 67, the 
owner of the electronic ticket does not have to go to a 
55 ticket store for a refund, and can receive the refund any- 
where. 

[21 78] According to the invention cited in claim 68, the 
calculation function of a computer system can be effi- 
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ciently distributed to individual information processing 
means. 

[2179] According to the invention cited in claim 69, an 
electronic payment card to be used and an electronic 
payment card in the sleeping state can be managed 
separately, and an efficient service operation is ena- 
bled. 

[2180] According to the invention cited in claim 70, 
since an electronic payment card must be registered to 
be used, even when an unregistered electronic payment 
card in the sleeping state is stolen, illegal use of that 
card will not occur. 

[21 81 ] According to the invention cited in claim 71 , an 
electronic telephone card to be used and an electronic 
telephone card in the sleeping state can be managed 
separately, and an efficient service operation is ena- 
bled. 

[2182] According to the invention cited in claim 72, 
since an electronic telephone card must be registered to 
be used, even when an unregistered electronic tele- 
phone card in the sleeping state is stolen, illegal use of 
that card will not occur. 

[2183] According to the invention cited in claim 73, an 
electronic ticket to be used and an electronic ticket in 
the sleeping state can be managed separately, and an 
efficient service operation is enabled. 
[2184] According to the invention cited in claim 74, 
since an electronic ticket must be registered for use, 
even when an unregistered electronic ticket in the 
sleeping state is stolen, illegal use of that card will not 
occur. 

[2185] According to the invention cited in claim 75, 
clearing of the electronic payment card and the transfer 
of the electronic payment card can be safely performed. 
[2186] According to the invention cited in daim 76, the 
verification process can be mutually performed by the 
electronic wallet and the electronic payment card clear- 
ing means, and the safety of payment card clearing is 
improved. 

[2187] According to the invention cited in claims 78 
and 80, various types of electronic payment cards can 
be safely issued. 

[2188] According to the invention cited in claim 79, 
various types of electronic payment cards can be safely 
issued by individual payment card issuers. 
[2189] According to the invention cited in claim 81, 
settlement of the communication charge using the elec- 
tronic telephone card and the transfer of the electronic 
telephone card can be safely performed. 
[2190] According to the invention cited in claim 82, a 
message generated by the electronic telephone card 
can be accompanied by the digital signature of the elec- 
tronic telephone card, and the validity of the message 
can be verified. 

[2191 ] According to the invention cited in claim 83, the 
verification process can be mutually performed by the 
electronic wallet and the electronic telephone card 
clearing means, and the safety of telephone card clear- 



ing is improved. 

[2192] According to the invention cited in claims 84 
and 86, various types of electronic telephone cards can 
be safely issued. 
s [2193] According to the invention cited in claim 85, 
various types of electronic telephone cards can be 
safely issued by individual telephone card issuers. 
[21 94] According to the invention cited in claim 87, the 
examination of an electronic ticket and the transfer of 
10 the electronic ticket can be safely performed. 

[2195] According to the invention cited in claim 88, a 
message generated by the electronic ticket can be 
accompanied by the digital signature of the electronic 
ticket, and the validity of the message can be verif ied. 
is [2196] According to the invention cited in claim 89, the 
verification process can be mutually performed by the 
electronic wallet and the electronic ticket examination 
means, and the safety of ticket examination is improved. 
[2197] According to the invention cited in claims 90 
20 and 92, various types of electronic tickets can be safely 
issued. 

[2198] According to the invention cited in claim 91, 
various types of electronic tickets can be safely issued 
by individual ticket issuers. 
25 [2199] According to the invention cited in claim 93, a 
payment method can be selected when an electronic 
payment card is purchased, and the usability is 
improved. 

[2200] According to the invention cited in claim 94, the 
30 payment card issuing means can designate a template 
program that is used for the electronic payment card, 
and various types of electronic payment cards can be 
issued. 

[2201 ] According to the invention cited in claim 95, the 
35 representative component information can be desig- 
nated when an electronic payment card is issued, and 
various types of electronic payment cards having a high 
degree of freedom can be issued. 
[2202] According to the invention cited in claim 96, 
40 since the signature key of the electronic payment card is 
updated by registering the card, the safety is improved. 
[2203] According to the invention cited in claim 97, an 
electronic payment card that is to be used can be 
selected, and the usability is improved. 
45 [2204] According to the invention cited in claim 98. 
since a value that is equal to or greater than the amount 
of a payment designated by the owner of the electronic 
wallet is not paid, the safety is improved. 
[2205] According to the invention cited in claim 99, 
so since the contents of an electronic payment card used 
for the payment are precisely represented for the elec- 
tronic payment card clearing means, the electronic pay- 
ment card clearing means can determine whether the 
pertinent electronic payment card is valid. 
55 [2206] According to the invention cited in claim 100. 
the amount of a payment and a person who is to receive 
the payment are guaranteed, and an illegal charge by a 
store can be prevented. 
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12207] According to the invention cited in claim 101 
whether a micro-check is issued by the owner of the 
electronic payment card is determined, and the validity 
of the micro-check can be exactly verified. 
[2208] According to the invention cited in claim 102 s 
the generation order for a micro-check and the matching 
of the remaining vaJue can be examined, and further 
the validity of the micro-check can be precisely exam- 
ined. 

[2209] According to the invention cited in claim 1 03 a 10 
used micro-check can be automatically collected and 
its validity can be examined. 

[2210] According to the invention cited in claim 104 
the transferring side and the recipient side can negoti- 
ate the contents to be transferred. 15 
[221 1] According to the invention cited in claim 105 
the recipient side can confirm the contents of an elec- 
tronic payment card to be transferred. 
[2212] According to the invention cited in claim 106 
since the recipient is guaranteed, even when a payment 20 
card transfer certificate message is stolen, the payment 
card will not be illegally employed. 
[221 3] According to the invention cited in claim 1 07 a 
payment method can be selected when an electronic 
telephone card is purchased, and the usability is 25 
improved. 

[2214] According to the invention cited in claim 108 
the telephone card issuing means can designate a tem- 
plate program that is used for the electronic telephone 
card and various types of electronic telephone cards 30 
can be issued. 

[2215] According to the invention cited in claim 109 
the representative component information can be desig- 
nated when an electronic telephone card is issued and 
various types of electronic telephone cards having a as 
nigh degree of freedom can be issued. 
[221 6] According to the invention cited in claim 1 1 0 
since the signature key of the electronic telephone card 
is updated by registering the card, the safety is 
improved. 4Q 
[221 7] According to the invention cited in claim 1 1 1 
an electronic telephone card that is to be used can be 
selected, and the usability is improved. 
[221 8] According to the invention cited in claim 1 12 
the communication service provider can charge a fee in 4s 
accordance with a wireless communication service that 
is provided. 

[2219] According to the invention cited in claim 1 13 
only a small amount of history information is required' 
even when the settlement of additional charges is per- so 
formed many times during a communication session 
[2220J According to the invention cited in claim 1 1 4 
since the contents of an electronic telephone card used 
for payment are precisely represented for the electronic 
telephone card clearing means, the electronic tele- ss 
phone card clearing means can determine whether the 
pertinent electronic telephone card is valid. 
[2221] According to the invention cited in claim 1 15 



the amount of a payment and a person who is to receive 
the payment are guaranteed, and an illegal charge by 
the owner of the electronic telephone card can be pre- 
vented. 

[2222] According to the invention cited in claim 1 1 6 
whether a telephone micro-check is issued by the owner 
of the electronic telephone card is determined, and the 
validity of the telephone micro-check can be exactly ver- 
ified. 

[2223] According to the invention cited in claim 1 1 7 
the generation order for a telephone micro-check and 
the matching of the remaining value can be examined 
and the validity of the telephone micro-check can be fur- 
ther precisely examined. 

[2224] According to the invention cited in claim 118a 
used telephone micro-check can be automatically col- 
lected, and the validity can be examined. 
[2225] According to the invention cited in claim 119 
the transferring side and the recipient side can negoti- 
ate the contents to be transferred. 
[2226] According to the invention cited in claim 120 
the recipient side can confirm the contents of an elec- 
tronic telephone card that is to be transferred. 
[2227] According to the invention cited in claim 121 
since the recipient is guaranteed, even when a payment 
card transfer certificate message is stolen, the payment 
card will not be illegally employed. 
[2228] According to the invention cited in claim 1 22 a 
payment method can be selected when an electronic 
ticket is purchased, and the usability is improved. 
[2229] According to the invention cited in claim 123 
the ticket issuing means can designate a template pro- 
gram that is used for the electronic ticket, and various 
types of electronic tickets can be issued. 
[2230] According to the invention cited in claim 124 
the representative component information can be desig- 
nated when an electronic ticket is issued, and various 
types of electronic tickets having a high degree of free- 
dom can be issued. 

[2231] According to the invention cited in daim 125 
since the signature key of the electronic ticket is 
updated by registering the ticket, the safety is improved. 
[2232] According to the invention cited in claim 126 
an electronic ticket that is to be used can be selected" 
and the usability is improved. 

[2233] According to the invention cited in claim 127 
the electronic ticket examination means can perform the 
examination process in accordance with a ticket that is 
presented. 

[2234] According to the invention cited in claim 128 
since the contents of an electronic ticket to be used are 
precisely represented for the electronic ticket examina- 
tion means, the electronic ticket examination means can 
determine whether the pertinent electronic ticket is 
valid. 

[2235] According to the invention cited in claim 129 
the contents of the electronic ticket that is examined is 
guaranteed, and an illegal charge by the owner of the 
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electronic ticket can be prevented. 
[2236] According to the invention cited in claim 130, 
whether a ticket examination response message is 
issued by the owner of the electronic ticket is deter- 
mined, and the validity of the ticket examination 
response can be exactly verified. 
[2237] According to the invention cited in claim 131 , 
the generation order for a ticket examination response 
message and the matching of the changes of the sta- 
tuses can be examined, and the validity of the ticket 
examination response message can be precisely exam- 
ined. 

[2238] According to the invention cited in claim 1 32, a 
ticket examination response can be automatically col- 
lected, and the validity can be examined. 
[2239] According to the invention cited in claim 133, 
the transferring side and the recipient side can negoti- 
ate the contents to be transferred. 
[2240] According to the invention cited in claim 134, 
the recipient side can confirm the contents of an elec- 
tronic ticket that is to be transferred. 
[2241] According to the invention cited in claim 135, 
since the recipient is guaranteed, even when a fecket 
transfer certificate message is stolen, the ticket will not 
be illegally employed. 
[2242] According to the invention cited in claim 136, 
the payment card issuer, the telephone card issuer and 
the ticket issuer can designate the procedures for clear- 
ing. 

[2243] According to the invention cited in claim 137, 
an electronic payment card, an electronic telephone 
card and an electronic ticket can be issued without 
keeping a purchaser waiting. 

[2244] According to the invention cited in claim 138, 
an electronic payment card, an electronic telephone 
card and an electronic ticket can be issued without 
keeping a purchaser waiting. 

[2245] According to the invention cited in claim 1 39, a 
plurality of electronic payment cards, electronic tele- 
phone cards and electronic tickets, and history informa- 
tion can also be managed in the memory ol an 
electronic wallet that has a limited capability. 
[2246] According to the invention cited in claim 140 
and 141 the service life of a battery for the electronic 
wallet or for the electronic payment card clearing means 
can be extended. ,-^+aa 
[2247] According to the invention cited in claim 144, 
the counterfeiting of printed material can be prevented. 
Further according to the invention for a recording 
medium on which are stored various programs, such as 
a control program for the central processing unit of the 
electronic wallet, these programs can be distributed in a 
portable form. . 
[2248] According to the invention cited in claim 155, 
the third storage means for storing the identification 
information and authorization information for a user is 
loaded into an arbitrary electronic wallet, so that the 
electronic wallet can be used as the electronic wallet of 



that user. 

[2249] According to the invention cited in claim 1 56. 
communication with the service providing means is not 
required when the third storage means is to be loaded 
s into and unloaded from the electronic wallet. 

[2250] According to the invention cited in claim 1 57. 
an electronic negotiable card that is obtained using the 
electronic wallet can be carried while stored in the IC 

10 [2251] According to the invention of printed material 
on which is printed electronic payment installation infor- 
mation electronic telephone card installation informa- 
tion or electronic ticket installation information, and a 
recording medium on which such information is stored, 
is an electronic payment card, an electronic telephone 
card or an electronic ticket can be transmitted along a 
distribution route. 

[2252] The printed material to which the removable 
coating is applied can be prevent the leakage of instal- 
so lation information before this printed material is pur- 
chased. 



Claims 



25 1. 



30 



A mobile electronic commerce system for paying 
via wireless communication means, a required 
amount from an electronic wallet that includes said 
wireless communication means and for receiving a 
product or a service, or a required permission, from 
a supply side, comprising: 

service means for connecting said electronic 
wallet and said supply side via said communi- 
cation means, 

wherein said service means installs, via said 
communication means, a program for an elec- 
tronic negotiable card in said electronic wallet; 
wherein said electronic negotiable card that is 
installed is employed to receive a product or a 
service, or a required permission, from said 
supply side; 

wherein based on a program for said electronic 
negotiable card a settlement process for which 
said electronic negotiable card is used, is per- 
formed by said electronic wallet and said sup- 
ply side via said communication means; and 
wherein, in association with said settlement 
process, said data that are stored in said elec- 
tronic wallet and at said supply side are trans- 
mitted to said service means at a 
predetermined time, and are managed thereat. 

2 A mobile electronic commerce system for paying, 
via wireless communication means, a required 
5 5 amount using an electronic walletthat includes sad 
wireless communication means and for receiving a 
product or a service, or a required permission, from 
a supply side, 
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wherein, via said wireless communication means, 
said electronic wallet applies the purchase of a pro- 
gram for an electronic negotiable card to service 
means for issuing said program for said electronic 
negotiable card; 

wherein said service means receives from elec- 
tronic negotiable card issuing means data concern- 
ing said electronic negotiable card, and with 
settlement means performs a settlement that is 
assoctated with the purchase of said electronic 10 
negotiable card; 

wherein, via said wireless communication means, 
said program for said electronic negotiable card is 
installed in said electronic wallet; 
wherein said electronic negotiable card that is 15 6 
installed is employed for receiving a product or a 
service, or a required permission, from said suddIv 
side; and 

wherein, based on said program for said negotiable 
card, a settlement process based on the use of said 2 o 
negotiable card is performed by said electronic wal- 
let and said supply side via said communication 
means. 

3- A mobile electronic commerce system according to 25 
claim 1 or 2, wherein, in said settlement process for 
which said negotiable card is used, said electronic 
wallet generates an electronic check corresponding 7 
to a payment amount based on said program pro- 
vided for said negotiable card, and transmits said so 
electronic check to said supply side via said wire- 
less communication means; wherein said supply 
side, upon receiving said electronic check, trans- 
mits an electronic receipt to said electronic wallet; 
wherein, thereafter, said electronic wallet and said 35 
supply side respectively store said electronic 8 
receipt and said electronic check as data concern- 
ing said settlement process. 

4. A mobile electronic commerce system according to 40 
claim 1 or 2, wherein, in said settlement process for 
which said electronic negotiable card is used, 
based on said program provided for said electronic 
negotiable card said electronic wallet transmits data 
for said electronic negotiable card to said supply 45 
side via said wireless communication means; 
wherein said supply side, upon receiving said data 
for said electronic negotiable card, transmits to said 
electronic wallet an electronic certificate required 9. 
for the granting of entrance permission and the so 
admission of the owner of said electronic wallet; 
and wherein, thereafter, said electronic wallet and 
said supply side respectively store said electronic 
certificate and said data for said electronic negotia- 
ble card as data concerning said settlement proc- 55 
ess. 



claim 1 or 2, wherein, in order to transfer said elec- 
tronic negotiable card that is installed in said elec- 
tronic wallet to a different electronic wallet, said 
electronic wallet generates a transfer message 
using said electronic negotiable card and transmits 
said message to said different electronic wallet; 
wherein said electronic wallet deletes said stored 
electronic negotiable card, and said different elec- 
tronic wallet transmits, to said service means, said 
transfer message for said negotiable card; wherein, 
thereafter, said service means installs a program 
for said electronic negotiable card in said different 
electronic wallet. 

A mobile electronic commerce system according to 
claim 1 or 2, wherein said electronic wallet trans- 
mits to said service means, via said wireless com- 
munication means, an installation number to be 
recorded on or in a distribution medium, such as 
printed matter or a recording medium; and wherein 
said service means receives, from negotiable carcl 
issuing means, data concerning an electronic 
negotiable card that is to be issued, and through 
wireless communication installs a program for an 
electronic negotiable card corresponding to said 
installation number. 

A mobile electronic commerce system according to 
claim 1 or 2, wherein said service means manages 
a template program that is a model of a program for 
an electronic negotiable card, and based on said 
template program generates said program for said 
electronic negotiable card and installs said program 
in said electronic wallet. 

A mobile electronic commerce system for paying, 
via wireless communication means, a required 
amount from an electronic wallet that includes said 
wireless communication means and for receiving a 
product or a service, or a required permission, from 
a supply side, 

wherein a program for an electronic negotiable card 
includes an inherent private key, and 
wherein, when an electronic wallet employs said 
negotiable card, said private key is employed to add 
a digital signature to data that are to be transmitted 
to a supply side via communication means. 



>- A mobile electronic commerce system according to 



A mobile electronic commerce system for paying, 
via wireless communication means, a required 
amount from an electronic wallet that includes said 
wireless communication means, and for receiving a 
product or a service, or a required permission, from 
a supply side, 

wherein said electronic wallet holds an electronic 
payment card that serves as an electronic payment 
card program, and employs said electronic pay- 
ment card when paying said required amount for 
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said product or said service that is received from 
said supply side; and 

wherein, via said wireless communication means, 
said electronic wallet and said supply side perform 
a settlement process that is associated with said 
payment. 

10. A mobile electronic commerce system according to 
claim 9, wherein an electronic payment card settle- 
ment means for making a payment using said elec- 
tronic payment card is provided for said supply side. 

11 . A mobile electronic commerce system according to 
claim 10, wherein service means is provided to 
connect, via said communication means, said elec- 
tronic wallet and said electronic payment card set- 
tlement means and to connect, via said 
communication means, said payment card issuing 
means and said settlement means, so that said 
electronic wallet can purchase said electronic pay- 
ment card through said service means. 

12. A mobile electronic commerce system according to 
claim 11, wherein said electronic wallet, said elec- 
tronic payment card settlement means, and said 
service means individually include a plurality of 
types of communication means, and wherein said 
electronic wallet, said electronic payment card set- 
tlement means, and said service means employ dif- 
ferent communication means when communication 
among the three is conducted. 

13. A mobile electronic commerce system for paying, 
via wireless communication means, a required 
amount from an electronic wallet that includes said 
wireless communication means and for receiving a 
product or a service, or a required permission, from 
a supply side, 

wherein said electronic wallet holds an electronic 
telephone card that serves as an electronic tele- 
phone card program, and employs said electronic 
telephone card when paying a required mount for a 
communication that is performed via wireless com- 
munication means using an exchange service pro- 
vided by said supply side; and 
wherein said electronic wallet and said supply side 
perform, via said wireless communication means, a 
settlement process that accompanies said pay- 
ment. 

14. A mobile electronic commerce system according to 
claim 13. wherein said supply side includes com- 
munication line exchange means and electronic tel- 
ephone card settlement means for settling said 
payment using said electronic telephone card. 

15. A mobile electronic commerce system according to 
claim 14, wherein service means is provided for 



connecting, via said communication means, said 
electronic wallet and said electronic payment card 
settlement means, and for connecting, via said 
communication means, said payment card issuing 
5 means and said settlement means, so that said 
electronic wallet can purchase said electronic tele- 
phone card through said service means. 

1 6 A mobile electronic commerce system according to 
10 claim 15, wherein said electronic wallet, said elec- 
tronic telephone card settlement means, and said 
service means individually include a plurality of 
types of communication means, and wherein said 
electronic wallet, said electronic telephone card 
settlement means, and said service means employ 
different communication means when communica- 
tion among the three is conducted. 



17. A mobile electronic commerce system for pay' n 9. 
via wireless communication means, a required 
amount from an electronic wallet that includes said 
wireless communication means and for receiving a 
product or a service, or a required permission, from 
a supply side, 

25 wherein said electronic wallet holds an electronic 
ticket that is electronically constituted, and provides 
information concerning said electronic ticket; and 
wherein said electronic wallet and said supply side 
perform via said wireless communication means. 
so an examination process for said electronic ticket for 
granting permission for an admission. 

18 A mobile electronic commerce system according to 
claim 17, wherein electronic ticket examination 

35 means for examining said electronic ticket is pro- 
vided for said supply side. 

19 A mobile electronic commerce system according to 
* daim 18, wherein service means is provided for 

40 connecting, via said communication means, said 
electronic wallet and said electronic ticket examina- 
tion means, and for connecting, via said communi- 
cation means, said ticket issuing means and said 
settlement means, so that said electronic wallet can 
45 purchase said electronic ticket through said service 
means. 

20 A mobile electronic commerce system according to 
claim 18, wherein said electronic wallet, said elec- 

50 tronic ticket examination means, and said service 
means individually include a plurality of types of 
communication means, and wherein said electronic 
wallet said electronic ticket examination means, 
and said service means employ different communi- 
55 cation means when communication among the 
three is performed. 

21. A mobile electronic commerce system comprising: 
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said electronic wallet defined in claim 9; 

electronic payment card settlement means; 

electronic telephone card settlement means; 

electronic ticket examination means; 

service provision means; s 

settlement processing means; 

payment card issuing means; 

telephone card issuing means; and 

ticket issuing means. 

10 

22. A mobile electronic commerce system according to 
claim 1 1 , wherein said electronic wallet holds an 
electronic credit card and employs said electronic 
credit card to purchase said electronic payment 
card, said electronic telephone card or said elec- is 
tronic ticket 

23. A mobile electronic commerce system according to 
claim 12, wherein said electronic wallet includes a 
plurality of kinds of wireless communication means 20 
as said plurality of types of communication means. 

24. A mobile electronic commerce system according to 
claim 23, wherein, as means for engaging in wire- 
less communication with said electronic payment 25 
card settlement means or said electronic ticket 
examination means, said electronic wallet includes 
wireless communication means that has a shorter 
communication distance and a higher directivity 
than has the wireless communication means 30 
employed for said electronic telephone card settle- 
ment or for said service providing means. 

25. A mobile electronic commerce system according to 
claim 24, wherein, as means for engaging in wire- 35 
less communication with said electronic payment 
card settlement means or said electronic ticket 
examination means, said electronic wallet includes 
optical communication means and radio communi- 
cation means for engaging in wireless communica- 40 
tion with said electronic telephone card settlement 
means or said service providing means. 

26. A mobile electronic commerce system according to 
claim 1 0. wherein said electronic payment card set- 45 
tlement means includes wireless communication 
means for engaging in communication with said 
service providing means. 



27. A mobile electronic commerce system according to 
claim 1 0, wherein said electronic payment card set- 
tlement means is an automatic vending machine 
that includes automatic product or service providing 
means. 

28. A mobile electronic commerce system according to 
claim 9, wherein said electronic wallet comprises: 



50 
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input means for entering a numerical value and 
for performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said wireless communication 
means, and for processing data received via 
said wireless communication means; 
first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; and 
second storage means for storing said data 
processed by said central processing unit, 
wherein said electronic ticket, said electronic 
payment card or said electronic telephone card 
is stored in said second storage means. 

29. A mobile electronic commerce system according to 
claim 10, wherein said electronic payment card set- 
tlement means includes: 

optical communication means for communicat- 
ing with said electronic wallet; 
communication means for communicating with 
said service providing means; 
input means for entering a numerical value and 
performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said optical communication 
means and said communication means, and for 
processing data received via said optical com- 
munication means and said communication 
means; 

first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; and 
second storage means for storing said data 
processed by said central processing unit, 
wherein a settlement process program module 
for said electronic payment card is stored in 
said second storage means. 

30. A mobile electronic commerce system according to 
claim 10, wherein said electronic payment card set- 
tlement means comprises: 

optical communication means for communicat- 
ing with said electronic wallet; 
radio communication means for communicat- 
ing with said service providing means; 
product identification means for identifying a 
product type, 

input means for entering a numerical value and 
for performing a selection operation; 
a central processing unit for calculating a 
charge for said product, for generating data to 
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be transmitted via said optical communication 
means and said radio communication means, 
and for processing data received via said opti- 
cal communication means and said radio com- 
munication means; s 
first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; 10 
second storage means for storing said data 
processed by said central processing unit; and 
third storage means for storing value informa- 
tion for said product, 

wherein a settlement process program module is 
for said electronic payment card is stored in 
said second storage means. 



said service providing means; 
communication line exchange means for 
exchanging a plurality of communication lines; 
a central processing unit for generating data to 
be transmitted via said radio communication 
means and said communication means, and for 
processing data received via said radio com- 
munication means and said communication 
means; 

first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; and 
second storage means for storing said data 
processed by said central processing unit, 
wherein a settlement process program module 
for said electronic telephone card is stored in 
said second storage means. 



31. A mobile electronic commerce system according to 
claim 27. wherein said automatic vending machine 
comprises: 



optical communication means for communicat- 
ing with said electronic wallet; 
radio communication means for communicat- 2s 
ing with said service providing means; 
selection means for selecting a product to be 
purchased or a service; 
automatic providing means for providing said 
product or said service; 30 
a central processing unit for generating data to 
be transmitted via said optical communication 
means and said radio communication means, 
and for processing data received via said opti- 
cal communication means and said radio com- 35 
munication means; 

first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 40 
said central processing unit; 
second storage means for storing said data 
processed by said central processing unit; 
third storage means for storing value informa- 
tion and stock information for said product; and 45 
fourth storage means for storing promotion 
information for said product or for said service, 
wherein a settlement process program module 
for said electronic payment card is stored in 
said second storage means. so 

32. A mobile electronic commerce system according to 
claim 14 or 21, wherein said electronic telephone 
card settlement means comprises: 



radio communication means for communicat- 
ing with said electronic wallet; 
communication means for communicating with 



33. A mobile electronic commerce system according to 
20 claim 1 7, wherein said electronic ticket examination 

means comprises: 

optical communication means for communicat- 
ing with said electronic wallet; 
communication means for communicating with 
said service providing means; 
input means for entering a numerical value and 
for performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said optical communication 
means and said communication means, and for 
processing data received via said optical com- 
munication means and said communication 
means; 

first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; and 
second storage means for storing said data 
processed by said central processing unit, 
wherein an examination program module for 
said electronic ticket is stored in said second 
storage means. 

34. A mobile electronic commerce system according to 
claim 21, wherein said service providing means 
comprises: 

user information storage means for storing 
information concerning said electronic wallet 
and information concerning a settlement con- 
tract concluded with an owner of said electronic 
wallet; 

55 merchant information storage means for stor- 

ing information concerning said electronic pay- 
ment card settlement means, said electronic 
telephone card settlement means and said 
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electronic ticket examination means, and infor- 
mation concerning a settlement contracts con- 
cluded with owners of electronic payment 
cards, electronic telephone cards and elec- 
tronic tickets; 

settlement processor information storage 
means for storing information concerning said 
settlement processing means; 
payment card issuer information storage 
means for storing information concerning said w 
payment card issuing means, and information 
concerning a settlement contract concluded 
with an owner of said payment card issuing 
means; * 

telephone card issuer information storage is 
means for storing information concerning said 
telephone card issuing means, and information 
concerning a settlement contract concluded 
with an owner of said telephone card issuing 
means; 

ticket issuer information storage means for 
storing information concerning said ticket issu- 
ing means, and information concerning a set- 
tlement contract concluded with an owner of 
said ticket issuing means; 25 
service director information storage means for 
storing list information for said electronic wallet 
said electronic payment card settlement 
means, said electronic telephone card settle- 
ment means, said electronic ticket examination so 
means, said settlement processing means 
said payment card issuing means, said tele- 
phone card issuing means and said ticket issu- 
ing means, and information concerning said 
electronic ticket, said electronic payment card as 
and said electronic telephone card; and 
a computer system for processing data in a 
service provision process for selling, issuing 
and managing said electronic ticket, said elec- 
tronic payment card and said electronic tele- 40 
phone card. 



35. A mobile electronic commerce system according to 
claim 11, wherein said settlement processing 
means comprises: 



376 

ing means, telephone card issuing means, and 
ticket issuing means; and 
a computer system for processing data 
employed in a settlement process. 

36. A mobile electronic commerce system according to 
claim 1 1 , wherein said payment card issuing means 
comprises: 

communication means for communicating with 
said service providing means; 
customer information storage means for stor- 
ing information concerning the purchase his- 
tory of a customer; 

payment card issuance information storage 
means for storing information concerning a 
payment card that has been issued; 
payment card information storage means for 
storing information concerning the stock of 
payment cards; and 

a computer system for processing data during 
a payment card issuing transaction process. 

37. A mobile electronic commerce system according to 
claim 15. wherein said telephone card issuing 
means comprises: 

communication means for communicating with 
said service providing means; 
customer information storage means for stor- 
ing information concerning the purchase his- 
tory of a customer; 

telephone card issuance information storage 
means for storing information concerning a tel- 
ephone card that has been issued; 
telephone card information storage means for 
storing information concerning the stock of tel- 
ephone cards; and 

a computer system for processing data con- 
cerning a telephone card issuing transaction 
process. 



45 



communication means for communicating with 
said service providing means; 
subscriber information storage means for stor- 
ing information concerning a settlement con- so 
tract concluded with an owner of said electronic 
wallet; 

member shop information storage means for 
storing information concerning settlement con- 
tracts concluded with owners of electronic pay- ss 
ment card settlement means, electronic 
telephone card settlement means, electronic 
ticket examination means, payment card issu- 



38. A mobile electronic commerce system according to 
claim 19, wherein said ticket issuing means com- 
prises: 

communication means for communicating with 
said service providing means; 
customer information storage means for stor- 
ing information concerning the purchase his- 
tory of a customer; 

ticket issuance information storage means for 
storing information concerning a ticket that has 
been issued; 

ticket information storage means for storing 
information concerning the stock of tickets; and 
a computer system for processing data con- 
cerning a ticket issuing transaction process. 
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9 A mobile electronic commerce system according to 
' claim 11 wherein said electronic wallet generates 
and then transmits, to said service providing 
means a payment card application message for the 
purchase of an electronic payment card; wherein 5 
said service providing means, upon receiving said 
payment card application message, communicates 
with said payment card issuing means and receives 
therefrom an electronic payment card issuance 
request message requesting that said service pro- w 
viding means perform an electronic payment card 
issuing process and an electronic payment card 
charge settlement process; wherein said service 
providing means, upon receiving said request mes- 
sage communicates with said settlement process- is 
ing means to perform the settlement process for the 
charge for said payment card, generates an elec- 
tronic payment card from payment card information 
that is generated by said payment card issuing 
means and is included in said electronic payment so 
card issuance request message, and transmits said 
electronic payment card to said electronic wallet; 
and wherein said electronic wallet, upon receiving 
said electronic payment card, stores said electronic 
payment card in said second storage means 2S 
thereof. 

40 A mobile electronic commerce system according to 
claim 28, wherein a micro-check message, gener- 
ated by an electronic payment card stored in said so 
second storage means, is transmitted to said elec- 
tronic payment card settlement means in order to 
confirm the submission of a payment that is the 
equivalent of an amount entered by said input ^ 
means. 

41 a mobile electronic commerce system according to 
' claim 40. wherein said electronic payment card set- 
tlement means, upon receiving said micro-check 
message, generates and then transmits, to said 40 
electronic wallet, said reception message to 
acknowledge that said micro-check message has 
been received. 

42 a mobile electronic commerce system according to 45 
claim 15, wherein said electronic wallet generates 
and then transmits, to said service providing 
means, a telephone card application message 
requesting the purchase of an electronic telephone 
card- wherein said service providing means, upon so 
receiving said telephone card application message, 
communicates with said telephone card issuing 
means and receives therefrom an electronic tele- 
phone card issuance reguest message indicating 
said service providing means has been requested ss 
to perform an electronic telephone card issuing 
process and an electronic telephone card charge 
settlement process; wherein said service providing 



means, upon receiving said request message, 
communicates with said settlement processing 
means to perform the settlement for the charge or 
said telephone card, generates an electronic te e- 
phone card using telephone card information that is 
generated by said telephone card issuing means 
and is included in said electronic telephone card 
issuance request message, and transmits sad 
electronic telephone card to said electronic wallet; 
and wherein said electronic wallet, upon receiving 
said electronic telephone card, stores said elec- 
tronic telephone card in said second storage means 
thereof. 

43 A mobile electronic commerce system according to 
claim 28. wherein a telephone micro-check mes- 
sage is generated by an electronic telephone card 
stored in said second storage means and is trans- 
mitted to said electronic telephone card settlement 
means in order to confirm the submission of a pay- 
ment that is equivalent to an amount charged by 
said electronic telephone settlement means. 

44 A mobile electronic commerce system according to 
' daim 43 wherein said electronic telephone card 

settlement means, upon receiving said telephone 
micro-check message, generates and then trans- 
mits, to said electronic wallet, a receipt message 
acknowledging that said telephone micro-check 
message has been received. 

45 A mobile electronic commerce system according to 
" claim 19. wherein said electronic wallet generates 

and then transmits, to said service providing 
means, a ticket application message requesting the 
purchase of an electronic ticket; wherein said serv- 
ice providing means, upon receiving said ticket 
application message, communicates with said 
ticket issuing means, and receives therefrom an 
electronic ticket issuance request message that 
indicates said service providing means has been 
requested to perform an electronic ticket issuing 
process and an electronic ticket charge settlement 
process; wherein said service providing means, 
upon receiving said request message, communi- 
cates with said settlement processing means to 
perform the settlement of the charge for said ticket, 
generates an electronic ticket from ticket informa- 
tion that is generated by sad ticket issuing means 
and is included in said electronic ticket issuance 
request message, and transmits said electronic 
ticket to said electronic wallet; and wherein said 
electronic wallet, upon receiving said dectronic 
ticket stores said electronic ticket in said second 
storage means thereof. 



46 A mobile electronic commerce system according to 
claim 28. wherein said electronic wallet generates a 
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ticket presenting message that describes the con- 
tents of said electronic ticket stored in said second 
storage means, and transmits said ticket presenting 
message to said electronic ticket examination 
means. 

5 

47. A mobile electronic commerce system according to 
claim 28. wherein said electronic wallet, upon 
receiving a command message from said electronic 
ticket examination means, changes said electronic w 
ticket to a post-examined state, and generates and 
tten transmits, to said electronic ticket examination 
means, a ticket examination response message 

♦S ? SS T 85 * e contents * electronic ticket 
that has been changed. , 5 

48 ' IS? 6 u*™' 0 comm «e system according to 
claim 47. wherein said electronic ticket examination 
means, upon receiving said ticket examination 

[f« h S< ! T S&ae - aenerates then transmits. 20 
to said electronic wallet, an examination certificate 
message that verifies said electronic ticket has 
been examined. 

49 ' ITS? ^r* 0 "' 0 commerce Wm according to 25 
claim 28. wherein a first electronic wallet generates 
a payment card transfer certificate message verify- 
ing that said electronic payment card stored in said 
second storage means is to be transferred to a sec- 
ond electronic wallet, and transmits said payment 30 
card transfer certificate message via wele^om 
mun.cat.on means to said second electronic waller 
wherein said second electronic wallet transmits, to 
sa,d serv.ce providing means, said payment card 
tracer certificate message that is" received; 35 
wherein said service providing means performs an 
examination to establish the validity of said pay- 
ment card transfer certificate message that is 

!T.?'rV nd tranSmitS " 10 said second electronic 
SnL?? electronic Payment card that is 40 
descnbed .n said payment card transfer certificate 
message; and wherein said second electronic wal- 
let stores. , n said second storage means thereof 
said electronic payment card that is received. 

£»TSE e ' e f tr0niC commerce ^stem according to * 
claim 49. wherein said second electronic wallet 
upon receding said payment card transfer certifi- 
cate message, generates a payment card receipt 

fer certrf.cate message has been received and 
transmits said payment card receipt message via 
said w.reless communication means to said first 
electrons wallet; and wherein said first electronic 
waHet upon receiving said payment card receipt ss 

h 6 e,eCtronic Pay™* 
stored in sad second storage means thereof. 
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51. A mobile electronic commerce system according to 
claim 28, wherein a first electronic wallet generates 
a telephone card transfer certificate message con- 
firming that said electronic telephone card stored in 
said second storage means is to be transferred to a 
second electronic wallet, and transmits said tele- 
phone card transfer certificate message via wire- 
less communication means to said second 
electronic wallet; wherein said second electronic 
wallet transmits, to said service providing means 
said telephone card transfer certificate message 
that is received; wherein said service providing 
means performs an examination to establish the 
validity of said telephone card transfer certificate 
message that is received, and transmits, to said 
second electronic wallet, the electronic telephone 
card that is described in said telephone card trans- 
fer certificate message; and wherein said second 
electronic wallet stores, in said second storage 
means thereof, said electronic telephone card that 
is received. 

52. A mobile electronic commerce system according to 
claim 28. wherein said second electronic wallet 
upon receiving said telephone card transfer certifi- 
cate message, generates a telephone card receipt 
message confirming that said telephone card trans- 
fer certificate message has been received and 
transmits said telephone card receipt message via 
said wireless communication means to said first 
electronic wallet; and wherein said first electronic 
wallet, upon receiving said telephone card receipt 
message, deletes said electronic telephone card 
stored in said second storage means thereof. 

53. A mobile electronic commerce system according to 
claim 28, wherein a first electronic wallet generates 
a ticket transfer certificate message confirming that 
said electronic ticket stored in said second storage 
means is to be transferred to a second electronic 
wallet, and transmits said ticket transfer certificate 
message via wireless communication means to 
said second electronic wallet; wherein said second 
electronic wallet transmits, to said service providing 
means, said ticket transfer certificate message that 
is rece.ved; wherein said service providing means 
performs an examination to establish the validity of 
said ticket transfer certificate message that is 
received, and transmits, to said second electronic 
wallet, an electronic ticket that is described in said 
ticket transfer certificate message; and wherein 
said second electronic wallet stores, in said second 
storage means thereof, said electronic ticket that is 
received. 



54. A mobile electronic commerce system according to 
claim 53. wherein said second electronic wallet 
upon receiving said ticket transfer certificate mes- 
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sage, generates a ticket receipt message confirm- 
ing that said ticket transfer certificate message has 
been received, and transmits said ticket receipt 
message via said wireless communicat.on means 
to said first electronic wallet; and wherein said firs s 
electronic wallet, upon receiving said ticket rece.pt 
message, deletes said electronic ticket stored in 
said second storage means thereof. 



5 A mobile electronic commerce system according to 10 
' claim 11. wherein said electronic wallet generates 
and then transmits, to said service providing 
means, an electronic payment card installation 
request message requesting the installation of an 
electronic payment card; wherein said service pro- « 
viding means, upon receiving said payment card 
installation request message, commuruca es wrth 
said payment card issuing means and receives 
therefrom an electronic payment card installation 
request message indicating that said service pro- » 
viding means is requested to install an electronic 
payment card; wherein said service providing 
means, upon receiving said request message, gen- 
erates an electronic payment card using paymen 
card information that is generated by said payment * 
card issuing means and is included in said elec- 
tronic payment card installation request message 
and transmits said electronic payment card to said 
electronic wallet; and wherein said electronic wal- 
let upon receiving said electronic payment card 30 
stores said electronic payment card in said second 
storage means thereof. 



in said electronic telephone card installation 
request message, and transmits said electfon.< ; tel- 
ephone card to said electronic wallet; and wherein 
said electronic wallet, upon 
tronic telephone card, stores said electronictele 
phone card in said second storage means thereof. 

58 A mobile electronic commerce system according to 
daim 57, wherein said electronic telephone card 
installation request message indudes said elec- 
tronic telephone card installation information that « 
Se^ed by input means for sad electronic wallet 
Sd S uniquely describes an electronic telephone 

card that is to be installed. 



56. A mobile electronic commerce system according to 
claim 55, wherein said electronic payment card ss 
installation request message includes electronic 
payment card installation information that is 
entered by input means for said electronic walle 
and that uniquely describes an electronic payment ^ 
card that is to be installed. 

57. A mobile electronic commerce system .according | to 
claim 15. wherein said electronic wallet generates 
and then transmits, to said service providing 
means, an electronic telephone card installation « 
request message for requesting the installation of 
an electronic telephone card; wherein sari service 
providing means, upon receiving sari telephone 
card installation request message, communicates 
with said telephone card issuing means and 
receives therefrom an electronic telephone card 
installation request message indicating that said 
service providing means is to install an electronic 
telephone card, wherein sari serv,ce providing 
means, upon receiving said request message, gen- 55 
erates an electronic telephone card using tele- 
phone card information that is generated by said 
telephone card issuing means and that is included 



59. A mobile electronic commerce system *^.ng to 
daim 19. wherein said electronic wallet Generates 
and then transmits, to said service providing 
means an electronic ticket installation request 
meSge requesting the installation of an electronic 
S wherein said service providing means, upon 
receiving said ticket installation request message 
communicates with said ticket issuing , means. and 
receives therefrom an electronic ticket instaHation 
request message indicating that sari serv.ce _ pra- 
Sng means is to install an electronic ticket, 
wherein sari service providing means, upon M^cerv- 
ing said request message, generates an electronic 
ticket using ticket information that is generated by 
s?ri ti^et issuing means and is included in said 
electronic ticket installation request «-~0*-£ 
transmits said electronic ticket to sari decide 
wallet; and wherein said electronic wallet upon 
receiving said electronic ticket, stores sari elec- 
tronic ticket in said second storage means thereof. 



60 A mobile electronic commerce system according to 
dZ 59 wherein said electronic ticket installation 
^uesV message indudes said elections ticket 
inflation information that '^llS 
means for said electronic wallet and that un^uely 
describes an electronic ticket that is to be installed. 

61 A mobile electronic commerce system according to 
claTm 55, wherein said electronic payment card 
Sation information, said 

card installation information or said electronic ticket 
Station information consists of first rientification 
describing a type of electronic paymen 
card a type of electronic telephone card or a type of 
eTecti-onic ticket, and second rientification informa- 
tion that uniquely describes an electronic ^paymerrt 
card an electronic telephone card or an electronic 
Sktt of a type described using said first identif ica- 
tionlnforr^on. that is to be installed; «M 
said second identification information is information 
generated at random. 
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62. A mobile electronic commerce system acceding to 
claim 61 wherein saidfirst identification information 
and said second identification information are rep- 
resented by 8-digit numerals and 32-digit numerals. 

63. A mobile electronic commerce system according to 
claim 55. wherein an object whereon or wherein 
said electronic payment card installation informa- 
tion, said electronic telephone installation informa- 
tion or said electronic ticket installation information 10 
is printed or engraved is employed as sales distribu- 
tion means or transfer means for said electronic 
payment card, said electronic telephone card or 
said electronic ticket 

64. A mobile electronic commerce system according to 
claim 55. wherein a recording medium on which 
said electronic payment card installation informa- 
tion, said electronic telephone installation informa- 
tion or sad electronic ticket installation information 20 
is stored is employed as sales distribution means or 
transfer means for an electronic payment card an 
electronic telephone card or an electronic ticket 

65 " l m0b « e ' e ? r0niC o™™* system according to 25 
claim 28. wherein said service providing means 
generates and then transmits, to said electronic 
wallet a modification command message for the 
modification of the contents of said electronic ticket- 
and said electronic wallet, upon receiving said mod- 30 
rfication command message, updates said elec- 
tronic ticket stored in said second storage means to 
provide a new electronic ticket as is described in 
said modification command message. 

66. A mobile electronic commerce system according to 
claim 28. wherein said service providing means 
generates and then transmits, to said electronic 
wallet a modification notification message for the 
modification of the contents of said electronic ticket <o 
wherein said electronic wallet, upon receiving said 
modification notification message, generates and 
then transmits, to said service providing means a 
reaction selection message acknowledging receipt 

ofthemessagefortherr«lificationofsaidcorrtents as 
of said electronic ticket; wherein said service pro- 
viding means, upon receiving said reaction selec- 
tion message, generates and then transmits, to said 
electronic wallet, a modification command mes- 
sage .instructing the modification of said contents of so 
said electronic ticket; and wherein said electronic 
wallet upon receiving said modification command 
message, updates said electronic ticket stored in 
said second storage means to provide a new elec- 
tronic ticket that is described in said modification ss 
command message. 

67. A mobile electronic commerce system according to 
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claim 28. wherein said service providing means 
generates and then transmits, to said electronic 
wallet, a modification notification message for the 
modification of the contents of said electronic ticket- 
wherein said electronic wallet, upon receiving said 
modification notification message, generates and 
then transmits, to said service providing means a 
reaction selection message requesting a refund for 
said electronic ticket; wherein said service provid- 
ing means, upon receiving said reaction selection 
message, communicates with said settlement 
processing means to issue a refund for said elec- 
tronic ticket, and generates and then transmits to 
said electronic wallet a refund receipt message 
indicating that a refund process has been com- 
pleted; and wherein said electronic wallet, upon 
receiving said refund receipt message, deletes said 
electronic ticket from said second storage means. 

68. A mobile electronic commerce system according to 
claim 21, wherein a computer system in said serv- 
ice providing means comprises: 

user information processing means for commu- 
nicating with said electronic wallet and for 
processing information stored in user informa- 
tion storage means; 

merchant information processing means for 
communicating with said electronic payment 
card settlement means, said electronic tele- 
phone card settlement means or said elec- 
tronic ticket examination means, and for 
processing information stored in merchant 
information storage means; 
settlement processor information processing 
means for communicating with said electronic 
settlement processing means, and for process- 
ing information stored in settlement processor 
information storage means; 
payment card issuer information processing 
means for communicating with said payment 
card issuing means, and for processing infor- 
mation stored in payment card issuer informa- 
tion storage means; 

telephone card issuer information processing 
means for communicating with said telephone 
card issuing means, and for processing infor- 
mation stored in telephone card issuer informa- 
tion storage means; 

ticket issuer information processing means for 
communicating with said ticket issuing means, 
and for processing information stored in ticket 
issuer information storage means; 
service director information processing means 
for communicating with said user information 
processing means, said merchant information 
processing means, said settlement processor 
information processing means, said payment 
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card issuer information processing means, said 
telephone card issuer information processing 
means and said ticket issuer information 
processing means, and for interacting with 
those means while processing data during a 
service providing process; and 
service manager information processing 
means for controlling the generation and the 
deletion of said user information processing 
means, said merchant information processing 
means, said settlement processor information 
processing means, said payment card issuer 
information processing means, said telephone 
card issuer information processing means, said 
ticket issuer information processing means and 
said service director information processing 
means. 

A mobile electronic commerce system according to 
claim 34 wherein said electronic wallet generates 
and then transmits, to said service providing 
means, a payment card registration request mes- 
sage requesting that said service providing means 
register, as an electronic payment card that is to be 
used by the owner of said electronic wallet, an elec- 
tronic payment card that is stored in said second 
storage means; and wherein said service providing 
means, upon receiving said payment card registra- 
tion request message, registers said electronic pay- 
ment card for use in said service director 
information storage means. 



A mobile electronic commerce system according to 
claim 69, wherein said service providing means, 
upon receiving said payment card registration 
request message, generates and then transmits, to 
said electronic wallet, a registered card certificate 
confirming that said electronic payment card has 
been registered for use; and wherein said elec- 
tronic wallet stores, in said second storage means, 
said registered card certificate that is received and 
changes the state of said electronic payment card 
to the usable state. 

1 A mobile electronic commerce system according to 
claim 34. wherein said electronic wallet generates 
and then transmits, to said service providing 
means, a telephone card registration request mes- 
sage requesting that service providing means reg- 
ister as an electronic telephone card that is to be 
used by the owner of said electronic wallet, an elec- 
tronic telephone card that is stored in said second 
storage means; and wherein said service providing 
means, upon receiving said telephone card regis- 
tration request message, registers said electronic 
telephone card for use in said service director infor- 
mation storage means. 



72 A mobile electronic commerce system according to 
' daim 71 wherein said service providing means, 
upon receiving said telephone card registration 
request message, generates and then transmits, to 
said electronic wallet, a registered card cerWicate 
confirming that said electronic telephone card has 
been registered for use; and wherein said elec- 
tronic wallet stores, in said second storage means 
said registered card certificate that is received and 
10 changes the state of said electronic telephone card 
to the usable state. 

73 A mobile electronic commerce system according to 
' claim 34. wherein said electronic wallet generates 
)5 and then transmits, to said service providing 
means a ticket registration request message 
requesting that said second storage means regis- 
ter as an electronic ticket that is to be used by the 
owner of said electronic wallet, an electronic ticket 
20 that is stored in said second storage means: and 
wherein said service providing means, upon receiv- 
ing said ticket registration request message, regis- 
ters said electronic ticket for use in said serv.ce 
director information storage means. 

25 74 a mobile electronic commerce system according to 
" claim 73 wherein said service providing means, 
upon receiving said ticket registration request mes- 
sage, generates and then transmits, to said elec- 
30 tronic wallet, a registered ticket certificate that 
verifies said electronic ticket has been registered 
for use; and wherein said electronic wallet stores, in 
said second storage means, said registered ticket 
certificate that is received, and changes the state of 
35 said electronic ticket to the usable state. 
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75 A mobile electronic commerce system according to 
' claim 28. wherein said electronic payment card 
comprises". 

a payment card program; 
presented card information describing the con- 
tents of said electronic payment card when 
issued; and 

a card certificate indicating that said electronic 
payment card is authentic. Said payment card 
program includes: 

electronic payment card state management 
information; and 

payment card program data for specifying an 
operation to be performed by said electronic 
payment card. The digital signature of the 
owner of said service providing means is pro- 
vided for said presented card information. 

76 A mobile electronic commerce system according to 
" claim 75, wherein said payment card program 
includes a card signature private key that is 
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employed for a digital signature provided for said 
electronic payment card, and wherein said card 
certificate is a public key certificate verifying that a 
card signature public key that is paired with said 
card signature private key is authentic. 5 

77. A mobile electronic commerce system according to 
claim 75, wherein a settlement program module for 
sard electronic payment card includes two crypto- 
graphic keys, an accounting device authentication io 
private key and a card authentication public key, 
and wherein said payment card program includes 
an accounting device authentication public key 
which is paired with said accounting device authen- 
tication private key, and a card authentication pri- 15 
vate key, which is paired with said card 
authentication public key. 

78. A mobile electronic commerce system according to 
claim 75, wherein said payment card program data so 
includes: 

a transaction module program for specifying 
the procedures to be used for message data 
that are exchanged by said electronic wallet 25 
and said electronic payment card settlement 
means; 

a display module program for specifying the 
manner in which said electronic payment card 
is to be displayed; and 30 
representative component information for said 
electronic payment card, 
wherein a central processing unit in said elec- 
tronic wallet processes, in accordance with 
said transaction module program for said elec- 35 
tronic payment card, said message data that 
are exchanged with said electronic payment 
card settlement means, and displays said rep- 
resentative component information in accord- 
ance with said display module program of said 40 
electronic payment card, so that on display 
means said electronic payment card is dis- 
played in said electronic wallet 



79. A mobile electronic commerce system according to 45 
claim 34, wherein a template program that consti- 
tutes a model for said electronic payment card is 
stored in said payment card issuer information stor- 
age means for said service providing means. 

50 

80. A mobile electronic commerce system according to 
claim 79, wherein said template program for said 
electronic payment card includes: 



Therefore, various types of electronic payment 
cards can be safely issued. 

81. A mobile electronic commerce system according to 
claim 28, wherein said electronic telephone card 
comprises: 

a telephone card program; 
presented card information describing the con- 
tents of said electronic telephone card when 
issued; and 

a card certificate indicating that said electronic 
telephone card is authentic, 
wherein said telephone card program includes: 
electronic telephone card state management 
information; and 

telephone card program data for specifying an 
operation to be performed by said electronic 
telephone card, and 

wherein the digital signature of the owner of 
said service providing means is provided for 
said presented card information. 

82. A mobile electronic commerce system according to 
claim 81. wherein said telephone card program 
includes a card signature private key that is 
employed for a digital signature provided for said 
electronic telephone card, and wherein said card 
certificate is a public key certificate verifying that a 
card signature public key that is paired with said 
card signature private key is authentic. 

83. A mobile electronic commerce system according to 
claim 81 , wherein a settlement program module for 
said electronic telephone card includes two crypto- 
graphic keys, an accounting device authentication 
private key and a card authentication public key, 
and wherein said telephone card program includes 
an accounting device authentication public key, 
which is paired with said accounting device authen- 
tication private key, and a card authentication pri- 
vate key, which is paired with said card 
authentication public key. 



a transaction module program for said elec- 
tronic payment card; 
a display module program; and 
representative component information. 
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84. A mobile electronic commerce system according to 
claim 81, wherein said telephone card program 
data includes: 

a transaction module program for specifying 
the procedures to be used for message data 
that are exchanged by said electronic wallet 
and said electronic telephone card settlement 
means; 

a display module program for specifying the 
manner in which said electronic telephone card 
is to be displayed; and 

representative component information for said 
electronic telephone card, and 
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wherein a central processing unit in said elec- 
tronic wallet processes, in accordance with 
said transaction module program lor said elec- 
tronic telephone card, said message data that 
are exchanged with said electronic telephone 5 
card settlement means, and displays said rep- 
resentative component information in accord- 
ance with said display module program for said 
electronic telephone card, so that on display 
means said electronic telephone card is dis- 10 
played in said electronic wallet. 

85. A mobile electronic commerce system according to 
claim 34, wherein a template program that consti- 
tutes a model for said electronic telephone card is is 
stored in said telephone card issuer information 
storage means for said service providing means. 



86. A mobile electronic commerce system according to 
claim 85. wherein said template program for said 
electronic telephone card includes: 

a transaction module program for said elec- 
tronic telephone card; 
a display module program; and 
representative component information. 

87. A mobile electronic commerce system according to 
claim 28, wherein said electronic ticket comprises: 



20 



25 



30 



a ticket program; 

presented ticket information describing the 
contents of said electronic ticket when issued; 
and 

a ticket certif icate indicating that said electronic ss 
ticket is authentic, 

wherein said ticket program includes: 
electronic ticket state management informa- 
tion; and 

ticket program data for specifying an operation 40 
to be performed by said electronic ticket, and 
wherein the digital signature of the owner of 
said service providing means is provided for 
said presented ticket information. 

45 

88. A mobile electronic commerce system according to 
claim 87, wherein said ticket program includes a 
ticket signature private key that is employed for a 
digital signature provided for said electronic ticket, 
and wherein said ticket certificate is a public key so 
certificate verifying that a ticket signature public key 
that is paired with said ticket signature private key is 
authentic. 



89. A mobile electronic commerce system according to 
claim 87, wherein an examination program module 
for said electronic ticket includes two cryptographic 
keys, a gate authentication private key and a ticket 



authentication public key, and wherein said ticket 
card program includes a gate authentication public 
key, which is paired with said gate authentication 
private key, and a ticket authentication private key, 
which is paired with said ticket authentication public 
key. 

90. A mobile electronic commerce system according to 
claim 87, wherein said ticket program data includes: 

a transaction module program for specifying 
the procedures to be used for message data 
that are exchanged by said electronic wallet 
and said electronic ticket examination means; 
a display module program for specifying the 
manner in which said electronic ticket is to be 
displayed; and 

representative component information for said 
electronic ticket, and 

wherein a central processing unit in said elec- 
tronic wallet processes, in accordance with 
said transaction module program for said elec- 
tronic ticket, said message data that are 
exchanged with said electronic ticket examina- 
tion means, and displays said representative 
component information in accordance with said 
display module program for said electronic 
ticket, so that on display means said electronic 
ticket is displayed in said electronic wallet. 

91 . A mobile electronic commerce system according to 
claim 34, wherein a template program that consti- 
tutes a model for said electronic ticket is stored in 
said ticket issuer information storage means for 
said service providing means. 

92 A mobile electronic commerce system according to 
claim 91. wherein said template program for said 
electronic ticket includes: 

a transaction module program for said elec- 
tronic ticket; 

a display module program; and 
representative component information. 

93. A mobile electronic commerce system according to 
claim 39, wherein identification information that 
describes a payment method selected by said input 
means for said electronic wallet is included in said 
payment card application message issued by said 
electronic wallet when requesting the purchase of 
an electronic payment card. 

94. A mobile electronic commerce system according to 
claim 79, wherein said electronic payment card 
issuance request message or said electronic pay- 
ment card installation request message includes 
template program identification information for des- 
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ignating, in the order to be used for the generation 
of an electronic payment card, one of a plurality of 
template programs that are stored in said payment 
card issuer information storage me£ns. * 

5 

95. A mobile electronic commerce system according to 
claim 78, wherein said electronic payment card 
issuance request message or said electronic pay- 
ment card installation request message includes 
representative component information describing 10 
the representative component information to be 
used for an electronic payment card that is to be 
generated. 

96. A mobile electronic commerce system according to 15 
claim 76, wherein said electronic wallet generates 
and then transmits, to said service providing 
means, a payment card registration request mes- 
sage requesting that said service providing means 
register, as an electronic payment card that is to be 20 
used by the owner of said electronic wallet, said 
electronic payment card stored in said second stor- 
age means for said electronic wallet; wherein said 
service providing means, upon receiving said pay- 
ment card registration request message, newly 25 
generates, for said electronic payment card, a card 
signature private key, a card signature public key 
and a registered card certificate for authenticating 
said card signature public key, registers said elec- 
tronic payment card for use in said service director 30 
information storage means, and then transmits, to 
said electronic wallet, said card signature private 
key and said registered card certificate; and 
wherein said electronic wallet updates said card 
signature private key and said registered card cer- 35 
tificate that are in storage by replacing them with 
those that have newly been received, and changes 
said state management information for said elec- 
tronic payment card to a usable state. 

40 

97. A mobile electronic commerce system according to 
claim 28, wherein said electronic wallet employs an 
electronic payment card, which is selected by input 
means for said electronic wallet from among those 
stored in said second storage means, to generate a 45 
micro-check message that verifies a payment cor- 
responding to an amount entered by said input 
means, and transmits said micro-check message to 
said electronic payment card settlement means. 

98. A mobile electronic commerce system according to 
claim 28, wherein said electronic wallet employs an 
electronic payment card, which is selected by input 
means of said electronic wallet from among those 
stored in said second storage means, to generate a ss 
payment offer message that offers a payment corre- 
sponding to an amount entered by said input 
means, and transmits said payment offer message 



to said electronic payment card settlement means; 
wherein said electronic payment card settlement 
means, upon receiving said payment offer mes- 
sage, generates and then transmits, to said elec- 
tronic wallet, a payment offer response message 
that assesses a charge corresponding to an 
amount entered by input means for said electronic 
payment card settlement means; wherein said elec- 
tronic wallet, upon receiving said payment offer 
response message and if said assessed charge is 
equal to or smaller than an amount entered by said 
input means for said electronic wallet, subtracts 
said assessed charge from a remaining amount 
stored on said electronic payment card, and gener- 
ates and then transmits, to said electronic payment 
card settlement means, a micro-check message 
validating a payment corresponding to said 
assessed charge; wherein said electronic payment 
card settlement means stores said received micro- 
check message in said second storage means for 
said electronic payment card settlement means, 
and generates and then transmits, to said elec- 
tronic wallet, a receipt message confirming that 
said micro-check message has been received; and 
wherein said electronic wallet stores said received 
receipt message in said second storage means for 
said electronic wallet. 

99. A mobile electronic commerce system according to 
claim 28, wherein said payment offer message 
includes: 

a payment amount entered by said input 
means of said electronic wallet; 
presented card information and a registered 
card certificate for said electronic payment 
card; and 

state management information to which a dig- 
ital signature has been added using said card 
signature private key. 

100. A mobile electronic commerce system according to 
claim 76. wherein said micro-check message 
includes: 

a payment amount; 

an amount remaining stored on said electronic 
payment card; 

identification information for said electronic 
payment card settlement means; and 
identification information for the owner of said 
electronic payment card settlement means. 
Further, a digital signature is provided for said 
micro-check message by using said card sig- 
nature private key for said electronic payment 
card. 



101. A mobile electronic commerce system according to 
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claim 100, wherein the digital signature of the 
owner of said electronic wallet is also provided tor 
said micro-check message. 

1 02.A mobile electronic commerce system according to s 
claim 40, wherein said micro-check message 
includes a micro-check issuing number represent- 
ing the order in which micro-check messages are 
generated by said electronic payment card. 



105. A mobile electronic commerce system according to 
claim 104, wherein said payment card transfer offer 
message includes: 

presented card information, and a card certifi- 
cate or a registered card certificate for said 
electronic payment card; and 
state management information having an 
added digital signature prepared using a card 
to signature private key. 



103. A mobile electronic commerce system according to 
claim 98, wherein, at a time designated by said 
service providing means, said electronic payment 
card settlement means generates an upload data 
message that includes data stored in said second is 
storage means for said electronic payment card 
settlement means, and then transmits said upload 
data message to said service providing means; 
wherein said service providing means, upon receiv- 
ing said upload data message, examines the valid- 20 
ity of a micro-check that is included in said upload 
data message by comparing said micro-check with 
registration information for said electronic payment 
card that is registered in said service director infor- 
mation storage means, and generates and then 25 
transmits, to said electronic payment card settle- 
ment means, an update data message that 
includes update data for said second storage 
means for said electronic payment card settlement 
means; and wherein said electronic payment card 30 
settlement means extracts said update data from 
said update data message that is received, and 
updates data stored in said second storage means. 



106. A mobile electronic commerce system according to 
claim 104. wherein said payment card transfer offer 
message includes a public key certificate for the 
owner of said first electronic wallet; wherein a dig- 
ital signature of said owner of said first electronic 
wallet is provided for said payment card transfer 
offer message; wherein said payment card transfer 
offer response message includes a public key cer- 
tificate for the owner of said second electronic wal- 
let; wherein a digital signature of said owner of said 
second electronic wallet is provided for said pay- 
ment card transfer offer message; wherein said 
payment card transfer certificate message includes 
identification information for said public key certifi- 
cate of said owner of said first electronic wallet and 
identification information for said public key certifi- 
cate of said owner of said second electronic wallet; 
and wherein a digital signature using a card signa- 
ture private key for said electronic payment card 
and a digital signature of said owner of said first 
electronic wallet are provided for said payment card 
transfer certificate message. 



1 04. A mobile electronic commerce system according to 35 
claim 28, wherein a f irst electronic wallet generates 
a payment card transfer offer message containing 
an offer to transfer, to a second electronic wallet, an 
electronic payment card that is stored in said sec- 
ond storage means, and then transmits said pay- 40 
ment card transfer offer message, via said wireless 
communication means, to said second electronic 
wallet; wherein said second electronic wallet, upon 
receiving said payment card transfer offer mes- 
sage, generates a payment card transfer offer 45 
response message indicating that the contents of 
said payment card transfer offer message are 
accepted, and then transmits said payment card 
transfer offer response message, via said wireless 
communication means, to said first electronic wal- so 
let; and wherein said first electronic wallet, upon 
receiving said payment card transfer offer response 
message, generates and then transmits, to said 
second electronic wallet, a payment card transfer 
certificate message confirming the transfer of said ss 
electronic payment card to said second electronic 
wallet. 



107.A mobile electronic commerce system according to 
claim 42, wherein identification information that 
describes a payment method selected by said input 
means of said electronic wallet is included in said 
telephone card application message issued by said 
electronic wallet when requesting the purchase of 
an electronic telephone card. 

108 A mobile electronic commerce system according to 
claim 85. wherein said electronic telephone card 
issuance request message or said electronic tele- 
phone card installation request message includes 
template program identification information for des- 
ignating, following the order that is to be used for 
the generation of electronic telephone cards, one of 
a plurality of template programs that are stored in 
said telephone card issuer information storage 
means. 

109. A mobile electronic commerce system according to 
daim 84, wherein said electronic telephone card 
issuance request message or said electronic tele- 
phone card installation request message includes 
representative component information describing 



198 



395 



EP0 950 968 A1 



396 



representative component information to be used 
for an electronic telephone card that is to be gener- 
ated. 

1 1 0.A mobile electronic commerce system according to s 
claim 82, wherein said electronic wallet generates 
and then transmits, to said service providing 
means, a telephone card registration request mes- 
sage requesting that said service providing means 
register, as an electronic telephone card that is to io 
be used by the owner of said electronic wallet, said 
electronic telephone card stored in said second 
storage means for said electronic wallet; wherein 
said service providing means, upon receiving said 
telephone card registration request message is 
newly generates, for said electronic telephone card, 
a card signature private key, a card signature public 
key and a registered card certificate for confirming 
said card signature public key, registers for use said 
electronic telephone card in said service director 20 
information storage means, and then transmits, to 
said electronic wallet, said card signature private 
key and said registered card certificate; and 
wherem said electronic wallet updates said card 
signature private key and said registered card cer- 25 
tificate that are in storage by replacing them with 
those that have newly been received, and changes 
said state management information for said elec- 
tronic telephone card to a usable state. 

30 

1 1 1.A mobile electronic commerce system according to 
claim 28, wherein said electronic wallet employs an 
electronic telephone card, which is selected by 
input means for said electronic wallet from among 
those stored in said second storage means, to gen- as 
erate a micro-check message verifying a payment 
corresponding to an amount entered by said input 
means, and transmits said micro-check message to 
said electronic telephone card settlement means. 

40 

1 12.A mobile electronic commerce system according to 
claim 28, wherein said electronic wallet employs an 
electronic telephone card, which is selected by 
irput means for said electronic wallet from among 
those stored in said second storage means, to gen- 45 1 
erate a micro-check call request message request- 
ing a radio communication service in order to 
communicate with a side that is designated by said 
input means, and transmits said micro-check call 
request message to said electronic telephone card so 
settlement means; wherein said electronic tele- 
phone card settlement means, upon receiving said 
micro-check call request message, generates and 
then transmits, to said electronic wallet, a micro- 
check call response message for an amount ss 
charged that corresponds to a communication fee; 
said electronic wallet, upon receiving said micro- 
check call response message, subtracts the 



amount charged from the remaining amount stored 
on said electronic telephone card, and generates 
and then transmits, to said electronic telephone 
card settlement means, a telephone micro-check 
message verifying the payment of an amount corre- 
sponding to said amount charged; wherein said 
electronic telephone card settlement means, upon 
receiving said telephone micro-check message, 
generates and then transmits, to said electronic 
wallet, a receipt message confirming the receipt of 
said telephone micro-check message; and wherein 
said electronic wallet stores said received receipt 
message in said second storage means for said 
electronic wallet. 

1 13. A mobile electronic commerce system according to 
claim 28, wherein said electronic telephone card 
settlement means, when radio wireless communi- 
cation service is provided, generates and then 
transmits, to said electronic wallet, a communica- 
tion fee charge message for an amount charged 
that corresponds to an additional communication 
fee; wherein said electronic wallet, upon receiving 
said communication fee charge message, subtracts 
said amount that is charged from an amount 
remaining on said electronic telephone card, and 
generates and then transmits, to said electronic tel- 
ephone card settlement means, a new telephone 
micro-check message verifying payment of the total 
amount charged; wherein said electronic telephone 
card settlement means generates and then trans- 
mits, to said electronic wallet, a receipt message 
confirming that said telephone micro-check mes- 
sage has been received; wherein said electronic 
wallet updates a receipt message stored in said 
second storage means for said electronic wallet by 
storing therein said receipt message that is newly 
received; and wherein said electronic telephone 
card settlement means, when provision of said 
radio wireless communication service is termi- 
nated, stores the latest telephone micro-check 
message in said second storage means for said 
electronic telephone card settlement means. 

14.A mobile electronic commerce system according to 
claim 112 or 113, wherein said micro-check call 
request message includes: 

identification information for said side that is 
designated by said input means of said elec- 
tronic wallet; 

presented card information and a registered 
card certificate for said electronic telephone 
card; and 

state management information accompanied 
by a digital signature that is provided by using a 
card signature private key. 
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115.A mobile electronic commerce system according to 
claim 82, wherein said telephone micro-check mes- 
sage includes: 

a payment amount; 5 
a amount remaining stored on said electronic 
telephone card; 

identif ication information for said electronic tel- 
ephone card settlement means; and 
identification information for the owner of said 10 
electronic telephone card settlement means, 
and 

wherein a digital signature is provided for said 
telephone micro-check message by using said 
card signature private key of said electronic tel- is 
ephone card. 

116. A mobile electronic commerce system according to 
claim 115, wherein not only said digital signature 
using said card signature private key for said elec- 20 
tronic telephone card, but also the digital signature 

of the owner of said electronic wallet is provided for 
said telephone micro-check message. 

1 1 7. A mobile electronic commerce system according to 25 
claim 43, wherein said telephone micro-check mes- 
sage includes a telephone micro-check issuing 
number representing the order in which telephone 
micro-check messages are generated by said elec- 
tronic telephone card. 30 



118.A mobile electronic commerce system according to 
claim 113, wherein, at a time designated by said 
service providing means, said electronic telephone 
card settlement means generates an upload data 35 
message that includes data stored in said second 
storage means for said electronic telephone card 
settlement means, and then transmits said upload 
data message to said service providing means; 
wherein said service providing means, upon receiv- 40 
ing said upload data message, examines the valid- 
ity of a telephone micro-check that is included in 
said upload data message by comparing said tele- 
phone micro-check with registration information for 
said electronic telephone card that is registered in 45 
said service director information storage means, 
and generates and then transmits, to said elec- 
tronic telephone card settlement means, an update 
data message that includes update data for said 
second storage means for said electronic tele- so 
phone card settlement means; and wherein said 
electronic telephone card settlement means 
extracts said update data from said update data 
message that is received, and updates data stored 
in said second storage means. 55 

11 9. A mobile electronic commerce system according to 
claim 28. wherein a first electronic wallet generates 



a telephone card transfer offer message offering to 
transfer, to a second electronic wallet, an electronic 
telephone card that is stored in said second storage 
means, and transmits said telephone card transfer 
offer message via said wireless communication 
means to said second electronic wallet; wherein 
said second electronic wallet, upon receiving said 
telephone card transfer offer message, generates a 
telephone card transfer offer response message 
indicating that the contents of said telephone card 
transfer offer message are accepted, and then 
transmits said telephone card transfer offer 
response message via said wireless communica- 
tion means to said first electronic wallet; and 
wherein said first electronic wallet, upon receiving 
said telephone card transfer offer response mes- 
sage, generates and then transmits, to said second 
electronic wallet, a telephone card transfer certifi- 
cate message confirming the transfer of said elec- 
tronic telephone card to said second electronic 
wallet. 

120. A mobile electronic commerce system according to 
claim 119, wherein said telephone card transfer 
offer message includes: 

presented card information and a card certifi- 
cate or a registered card certificate for said 
el ectronic telephone card; and 
state management information accompanied 
by a digital signature added by using a card 
signature private key. 



121 A mobile electronic commerce system according to 
claim 119. wherein said telephone card transfer 
offer message includes a public key certificate for 
the owner of said first electronic wallet; the digital 
signature of said owner of said first electronic wallet 
is provided for said telephone card transfer offer 
message; wherein said telephone card transfer 
offer response message includes a public key cer- 
tificate for the owner of said second electronic wal- 
let- wherein the digital signature of said owner of 
said second electronic wallet is provided for said 
telephone card transfer offer message; wherein 
said telephone card transfer certificate message 
includes identification information for said public 
key certificate for said owner of said first electronic 
wallet and identification information for said public 
key certificate for said owner of said second elec- 
tronic wallet; and wherein a digital signature using a 
card signature private key for said electronic tele- 
phone card and the digital signature of said owner 
of said first electronic wallet are provided for said 
telephone card transfer certificate message. 

122. A mobile electronic commerce system according to 
daim 45, wherein identification information that 



200 



399 



EP 0 950 968 A1 



400 



describes a payment method selected by said input 
means of said electronic wallet is included in said 
ticket application message issued by said electronic 
wallet when requesting the purchase of an elec- 
tronic ticket. 

5 

123. A mobile electronic commerce system according to 
claim 91, wherein said electronic ticket issuance 
request message or said electronic ticket installa- 
tion request message includes template program 10 
identification information for designating, following 
the order that is to be used for the generation of 
electronic tickets, one of a plurality of template pro- 
grams that are stored in said ticket issuer informa- 
tion storage means. 15 

124. A mobile electronic commerce system according to 
claim 90. wherein said electronic ticket issuance 
request message or said electronic ticket installa- 
tion request message includes representative com- 20 
ponent information describing representative 
component information for an electronic ticket that 
is to be generated. 

1 25. A mobile electronic commerce system according to 25 
claim 88. wherein said electronic wallet generates 
and then transmits, to said service providing 
means, a ticket registration request message 
requesting that said service providing means regis- 
ter, as an electronic ticket that is to be used by the 30 
owner of said electronic wallet said electronic ticket 
stored in said second storage means for said elec- 
tronic wallet; wherein said service providing means, 
upon receiving said ticket registration request mes- 
sage, newly generates, for said electronic ticket a 35 
ticket signature private key, a ticket signature public 
key and a registered ticket certificate for verifying 
said ticket signature public key registers said elec- 
tronic ticket for use in said service director informa- 
tion storage means, and then transmits, to said 40 
electronic wallet, said ticket signature private key 
and said registered ticket certificate; and wherein 
said electronic wallet updates said ticket signature 
private key and said registered ticket certificate that 
are stored by replacing them with those that have 45 
been newly received, and changes said state man- 
agement information for said electronic ticket to a 
usable state. 



127. A mobile electronic commerce system according to 
claim 126, wherein said electronic ticket examina- 
tion means, upon receiving said ticket presenting 
message, generates and then transmits, to said 
electronic wallet, a ticket examination message 
instructing the modification of said electronic ticket 
to a post-examined state; wherein said electronic 
wallet, upon receiving said ticket examination mes- 
sage, changes said electronic ticket to said post- 
examined state, and generates and then transmits, 
to said electronic ticket examination means, a ticket 
examination response message that describes the 
contents of the modified electronic ticket; wherein 
said electronic ticket examination means stores 
said received ticket examination response mes- 
sage in said second storage means for said elec- 
tronic ticket examination means, and generates and 
then transmits, to said electronic wallet, an exami- 
nation certificate message certifying that said elec- 
tronic ticket has been examined; and wherein said 
electronic wallet stores said received examination 
certificate message in said second storage means 
for said electronic wallet. 

128. A mobile electronic commerce system according to 
daim 126, wherein said ticket presenting message 
includes: 

presented ticket information and a registered 
ticket certificate for said electronic ticket; and 
state management information accompanied 
by a digital signature provided by using a ticket 
signature private key. 

129. A mobile electronic commerce system according to 
claim 88, wherein said ticket examination response 
message includes: 

state management information for said elec- 
tronic ticket; 

identification information for said electronic 
ticket examination means; and 
identification information for the owner of said 
electronic ticket examination means, and 
wherein a digital signature is provided for said 
ticket examination response message by using 
said ticket signature private key for said elec- 
tronic ticket. 



1 26. A mobile electronic commerce system according to so 
claim 28, wherein said electronic wallet generates a 
ticket presenting message in which is designated 
an electronic ticket that is selected, from among 
those stored in said second storage means, by 
input means for said electronic wallet, and transmits 55 
said ticket presenting message to said electronic 
ticket examination means. 



130. A mobile electronic commerce system according to 
claim 129, wherein said ticket examination 
response message includes identification informa- 
tion for said electronic ticket examination means 
and identification information for the owner of said 
electronic ticket examination means, and wherein 
said digital signature prepared using said ticket sig- 
nature private key for said electronic ticket and the 
digital signature of the owner of said electronic wal- 
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let are provided for said ticket examination 
response message. 

131 .A mobile electronic commerce system according to 
claim 47, wherein said ticket examination response 5 
message includes a ticket examination number rep- 
resenting the order in which ticket examination 
response messages are generated by said elec- 
tronic ticket. 

10 

132. A mobile electronic commerce system according to 
claim 127, wherein, at a time designated by said 
sen/ice providing means, said electronic ticket 
examination means generates an upload data mes- 
sage that includes data stored in said second stor- is 
age means for said electronic ticket examination 
means, and then transmits said upload data mes- 
sage to said service providing means; wherein said 
service providing means, upon receiving said 
upload data message, determines the validity of a 20 
ticket examination response that is included in said 
upload data message by comparing said ticket 
examination response with registration information 
for said electronic ticket that is registered in said 
service director information storage means, and 25 
generates and then transmits, to said electronic 
ticket examination means, an update data message 
that includes update data for said second storage 
means for said electronic ticket examination means; 
and wherein said electronic ticket examination so 
means extracts said update data from said update 
data message that is received, and updates data 
stored in said second storage means. 



133.A mobile electronic commerce system according to 35 
claim 28, wherein a f irst electronic wallet generates 
a ticket transfer offer message offering to transfer, 
to a second electronic wallet, an electronic ticket 
that is stored in said second storage means, and 
then transmits said ticket transfer offer message via 40 
said wireless communication means to said second 
electronic wallet; wherein said second electronic 
wallet, upon receiving said ticket transfer offer mes- 
sage, generates a ticket transfer offer response 
message indicating the contents of said ticket trans- 45 
fer offer message are acceptable, and then trans- 
mits said ticket transfer offer response message via 
said wireless communication means to said first 
electronic wallet; and wherein said first electronic 
wallet, upon receiving said ticket transfer offer so 
response message, generates and then transmits, 
to said second electronic wallet, a ticket transfer 
certificate message confirming the transfer of said 
electronic ticket to said second electronic wallet. 

55 

134.A mobile electronic commerce system according to 
claim 133, wherein said ticket transfer offer mes- 
sage includes: 



402 

presented ticket information and a ticket certifi- 
cate or a registered ticket certificate for said 
electronic ticket; and 

state management information accompanied 
by a digital signature that is added by using a 
ticket signature private key. 

135. A mobile electronic commerce system according to 
claim 133, wherein said ticket transfer offer mes- 
sage includes a public key certificate for the owner 
of said first electronic wallet; wherein the digital sig- 
nature of said owner of said f irst electronic wallet is 
provided for said ticket transfer offer message; 
wherein said ticket transfer offer response message 
includes a public key certificate for the owner of 
said second electronic wallet; wherein the digital 
signature of said owner of said second electronic 
wallet is provided for said ticket transfer offer mes- 
sage; wherein said ticket transfer certificate mes- 
sage includes identification information for said 
public key certificate for said owner of said first 
electronic wallet and identification information for 
said public key certificate for said owner of said sec- 
ond electronic wallet; and wherein a digital signa- 
ture using a ticket signature private key for said 
electronic ticket and the digital signature of said 
owner of said first electronic wallet are provided for 
said ticket transfer certificate message. 

136. A mobile electronic commerce system according to 
claim 39, wherein settlement option information for 
deciding which procedures to use for settlement is 
included in said electronic payment card issuance 
request message, in said electronic telephone card 
issuance request message or in said electronic 
ticket issuance request message. 



137. A mobile electronic commerce system according to 
claim 136. wherein said service providing means, 
upon receiving said electronic payment card issu- 
ance request message, said electronic telephone 
card issuance request message or said electronic 
ticket issuance request message, generates and 
then transmits, to said electronic wallet, an elec- 
tronic payment card, an electronic telephone card 
or an electronic ticket before performing a price set- 
tlement in accordance with said settlement option 
information. 

138 A mobile electronic commerce system according to 
claim 39, wherein said service providing means, 
upon receiving said electronic payment card issu- 
ance request message, said electronic telephone 
card issuance request message or said electronic 
ticket issuance request message, generates and 
then transmits, to said electronic wallet, an elec- 
tronic payment card, an electronic telephone card 
or an electronic ticket, and a temporary receipt 
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message describing the contents of a settlement 
before performing a price settlement in accordance 
with said settlement option information. 

1 39.A mobile electronic commerce system according to 5 
claim 28, wherein data concerning said electronic 
payment card, said electronic telephone card and 
sad electronic ticket belonging to the owner of said 
electronic wallet, and data processed by said cen- 
tral processing unit of said electronic wallet are w 
stored in said second storage means for said elec- 
tronic wallet or in said user information storage 
means for said service providing means; wherein 
said data are managed by describing, In said sec- 
ond storage means for said electronic wallet, identi- is 
fication information for said data, and addresses of 
said data in said corresponding storage means- 
wherem. when data at an address in said user infor- 
mation storage means are to be processed, said 
electronic wallet generates and then transmits, to so 
said service providing means, a remote access 
request message requesting address data: wherein 
sad service providing means, upon receiving sad 
remote access request message, generates and 
then transmits, to said electronic wallet, a remote zs 
access data message in which said requested data 
are included; and wherein said electronic wallet 
upon receiving said remote access data message' 
extracts said requested data from said message. ' 

140.A mobile electronic commerce system according to 
claim 1. wherein said electronic wallet employs a 
ferroelectric nonvolatile memory as storage means 



144. Apr.nted matter according to claim 142, wherein to 
prevent holographic counterfeiting, a micro-charac- 
ter or a micro-pattern is printed on or etched in said 
object. 

145. A recording medium according to claim 64, on 
which electronic payment card installation informa- 
tion, electronic telephone card installation informa- 
tion, or electronic ticket installation information is 
recorded using a form that is readable by record- 
ing/reproduction means. 

146. A recording medium, on which a control program 
for said central processing unit of said electronic 
wallet defined in claim 28 is stored in a form reada- 
ble by a computer. 

147. A recording medium, on which a control program 
for sad central processing unit of said electronic 
payment card settlement means defined in claim 29 
is recorded in a form readable by a computer. 

148. A recording medium, on which a control program 
for said central processing unit of said electronic 
telephone card settlement means defined in claim 
32 is recorded in a form readable by a computer. 

149. A recording medium, on which a control program 
for said central processing unit of sad electronic 
ticket examination means defined in claim 33 is 
recorded in a form readable by a computer 



141. A mob.le electronic commerce system according to 35 
claim 10. wherein a ferroelectric nonvolatile mem- 
ory is employed as storage means for said elec- 
tronic payment card settlement means. 

142. A printed matter according to claim 63. wherein 40 
said object is one whereon or wherein electronic 
payment card installation information, electronic tel- 
ephone card installation information, or electronic 
ticket installation information is printed or engraved 
in a form readable by a person or reading means. 4s 

143. A printed matter according to claim 142, wherein a 
coating is applied to a portion of said object wher- 
eon or wherein sad electronic payment card instal- 
lation information, said electronic telephone card so 
installation information or said electronic ticket 
installation information is printed or engraved in 
order to disable the reading of said electronic pay- 
ment card installation information, said electronic 
telephone card installation information or sad elec- ss 
tron.c ticket installation information, and wherein 
sad coating is removable. 



150. A recording medium, on which a processing pro- 
gram for said computer system of sad service pro- 
viding means defined in claim 34 is recorded in a 
form readable by a computer. 

151. A recording medium, on which a processing pro- 
gram for said computer system of said settlement 
processing means defined in claim 3S is recorded 
in a form readable by a computer. 

152. A recording medium, on which a processing pro- 
gram for said computer system of sad payment 
card issuing means defined in claim 36 is recorded 
in a form readable by a computer. 

153. A recording medium, on which a processing pro- 
gram for said computer system of sad telephone 
card issuing means defined in claim 37 is recorded 
in a form readable by a computer. 

154. A recording medium, on which a processing pro- 
gram for said computer system of said ticket issuing 
means defined in daim 38 is recorded in a form 
readable by a computer. 

155. An electronic wallet used for a mobile electronic 
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commerce system for paying, via wireless commu- 
nication means, a required amount Irom sa.d elec- 
tronic wallet that includes said wireless 
communication means and for receiving a product 
or a service, or a required permission, from a sup- 
ply side, said electronic wallet comprising: 

input means for entering a numerical value and 
for performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said wireless communication 
means, and for processing data received via 
said wireless communication means; 
first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; 
second storage means for storing said data 
processed by said central processing unit, and 
an electronic negotiable card received through 
said wireless communication means; and 
third storage means for storing identification 
information and authorization information for 
the user of said electronic wallet, 
wherein for carrying, said third storage means 
is detachable from said electronic wallet, 
wherein, when said third storage means is 
removed from said electronic wallet, said elec- 
tronic negotiable card stored in said second 
storage means is erased, and 
wherein, when said third storage means is 
attached to said electronic wallet, said elec- 
tronic wallet communicates with said service 
providing means via said wireless communica- 
tion means, and receives said electronic nego- 
tiable card that said user of said electronic 
wallet owns and stores said electronic negotia- 
ble card in said second storage means. 

156.An electronic wallet, used for a mobile electronic 
commerce system for paying, via wireless commu- 
nication means, a required amount from said elec- 
tronic wallet that includes said w.reless 
communication means and for receiving a product 
or a service, or a required permission, from a sup- 
ply side, said electronic wallet comprising: 

input means for entering a numerical value and 
for performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said wireless communication 
means, and for processing data received via 
said wireless communication means; 
first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
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said central processing unit; 
second storage means tor storing said date 
processed by said central processing unit; and 
third storage means for storing an electronic 
negotiable card received via said wireless com- 
munication means, 

wherein for carrying, said third storage means 
is detachable from said electronic wallet. 

157 An electronic wallet, used for a mobile electronic 
commerce system tor paying, via wireless commu- 
nication means, a required amount from said elec- 
tronic wallet that includes said wireless 
communication means and for receiving a product 
or a service, or a required permission, from a sup- 
ply side, said electronic wallet comprising: 

input means for entering a numerical value and 
for performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said wireless communication 
means, and for processing data received via 
said wireless communication means; 
first storage means for storing a control (pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; 
second storage means tor storing said date 
processed by said central processing unit; and 
IC card reading/writing means, 
wherein said electronic negotiable card 
received via said wireless communication 
means is stored in an IC card that is loaded in 
said IC card reading/writing means. 
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158. An electronic wallet comprising: 

wireless communication means; 
means for installing a program for an electronic 
negotiable card obtained from a predetermined 
agency via said wireless communication 
means; and 

means for. in order to receive a product or a 
service from a seller or to obtain a permission 
employing said electronic negotiable card with 
said wireless means in accordance wrth said 
program for said electronic negotiable card. 

159 An electronic wallet according to claim 158. 
'wherein an inherent private key for providing a do- 
ted signature for data to be transmitted to said seller 
is included in said program for said electronic nego- 
tiable card, so that said electronic negotiable card is 
employed by means provided for employing said 
electronic negotiable card. 

160.An electronic wallet according to claim 158. further 
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comprising: 



means for, when said installation means 
receives a modification instruction message 
from said predetermined agency instructing a 
change to said program for said electronic 
negotiable card, changing, in accordance with 
said modification instruction message, said 
program for said negotiable card that is 
installed. 

161 .An electronic wallet according to claim 158, further 
comprising: 

means for, when a modification notification 
message for the changing of the contents of 
said program for said electronic negotiable 
card is received from said predetermined 
agency, generating a reaction selection mes- 
sage indicating that the modification of the con- 
tents of said program is accepted; and 
means for, when said installation means 
receives a modification instruction message 
from said predetermined agency instructing the 
changing of said program for said electronic 
negotiable card, changing in accordance with 
said modification instruction message said pro- 
gram for said negotiable card that is installed. 

162. An electronic wallet according to claim 158. further 
comprising: 
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means for, when a modification notification 
message that the contents of said electronic 
negotiable card is to be changed is received 35 
from said predetermined agency, generating a 
reaction selection message requesting a 
refund process for said electronic negotiable 
card, and for transmitting said reaction selec- 
tion message to said predetermined agency- 40 
and 

means for, when a refund receipt message is 
received from said predetermined agency indi- 
cating the termination of said refund process, 
deleting said program for said negotiable card 45 
that is installed. 



163. An electronic wallet according to claim 158, 
wherein said program for said negotiable card is a 
coupon ticket that has at least two functions for a 
payment card, a telephone card and a ticket. 

164. A seller terminal comprising: 

wireless communication means; 
means for installing, from a predetermined 
agency, a program module that defines a set- 
tlement process performed by a seller when an 
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electronic negotiable card is used; and 
means for, in accordance with said program 
module, communicating with an electronic wal- 
let via said wireless communication means and 
for performing said settlement process for said 
seller when said electronic negotiable card is 
employed. 

165. An automatic vending machine comprising: 

wireless communication means; 
means for installing, from a predetermined 
agency, a program module that defines a set- 
tlement process performed by said automatic 
vending machine when an electronic negotia- 
ble card is used; 

means for. in accordance with said program 
module, communicating with an electronic wal- 
let via said wireless communication means and 
for performing said settlement process for said 
automatic vending machine when said elec- 
tronic negotiable card is employed; and 
means for providing a product or a service 
when said settlement process for said auto- 
matic vending machine has been completed. 

166.A call switching center machine comprising: 

wireless communication means; 
means for installing, from a predetermined 
agency, a program module that defines a set- 
tlement process performed by said call switch- 
ing center machine when an electronic 
negotiable card is used; 
means for, in accordance with said program 
module, communicating with an electronic wal- 
let via said wireless communication means and 
for performing said settlement process for said 
call switching center machine when said elec- 
tronic negotiable card is employed; and 
means for providing a product or a service 
when said settlement process for said call 
switching center machine has been completed. 

167. A management machine for a service providing 
agency comprising: 

communication means; 

means for generating a program for an elec- 
tronic negotiable card in order to install said 
program in an electronic wallet, and for trans- 
mitting said program for said electronic negoti- 
able card to said electronic wallet by radio via 
said communication means; and 
means for transmitting to a seller terminal, in 
order to install said program in said seller termi- 
nal, a program module that defines a settle- 
ment process performed by a seller when said 
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program for said electronic negotiable card is 
employed. 

168. A management machine for a service providing 
agency comprising: 

communication means; 

means for receiving from an electronic wallet, 
by radio via said communication means, a pur- 
chase order request for a program for an elec- 
tronic negotiable card; 

means for receiving data, concerning a negoti- 
able card that is to be issued, from a negotiable 
card issuing agency that issues said electronic 
negotiable card that is ordered by said pur- 
chase order request; 

means for performing, together with a settle- 
ment agency, a settlement process that accom- 
panies the purchase of said negotiable card; 
means for generating a program for an elec- 
tronic negotiable card, based on data that are 
received from said negotiable card issuing 
agency and that concern a negotiable card to 
be issued, and for transmitting said program for 
said negotiable card to said electronic wallet by 
radio via said communication means; and 
means for transmitting to a seller terminal, in 
order to install said program in said seller termi- 
nal, a program module that defines a settle- 
ment process performed by a seller when said 
program for said electronic negotiable card is 
employed. 

169. A management machine for a negotiable card pro- 
gram issuing agency according to claim 168. fur- 
ther comprising: 

means for generating a modification instruction 
message for changing said program for said 
negotiable card that is installed in said elec- 
tronic wallet; and 

means for transmitting said modification 
instruction message to said electronic wallet 
via said communication means. 

170. A management machine for a negotiable card pro- 
gram issuing agency according to claim 168, fur- 
ther comprising: 

means for generating a modification notifica- 
tion message for the modification of said pro- 
gram for said negotiable card that is installed in 
said electronic wallet; 

means for receiving, from said electronic wal- 
let, a reaction selection message indicating 
said modification has been accepted; 
means for, upon receiving said reaction selec- 
tion message, generating a modification 
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instruction message for changing said program 
for said negotiable card that is installed in said 
electronic wallet; and 

means for transmitting said modification 
5 instruction message to said electronic wallet 

via said communication means. 

171 .A management machine for a negotiable card pro- 
gram issuing agency according to claim 168, fur- 
to ther comprising: 

means for generating a modification notifica- 
tion message for the modification of said pro- 
gram for said negotiable card that is installed in 
said electronic wallet; 

means for receiving from said electronic wallet, 
in response to said modification notification, a 
reaction selection message requesting a 
refund for said electronic negotiable card; 
means for, upon receiving said reaction selec- 
tion message, performing a refund settlement 
process for a predetermined settlement 
agency; 

means for generating a refund receipt mes- 
sage indicating that said refund settlement 
process has been completed; and 
means for transmitting said refund receipt mes- 
sage to said electronic wallet via said commu- 
nication means. 



15 



20 



25 



30 



35 



40 



45 



50 



55 



172.A management machine for a service providing 
agency, which transmits, to an electronic wallet, an 
electronic negotiable card program, including a 
card signature private key, a card certificate, a card 
authorization private key and an accounting 
machine authorization private key. and which trans- 
mits to a seller terminal a settlement program, 
including a card authorization public key that is 
paired with said card authorization private key and 
an accounting machine authorization private key 
that is paired with said accounting machine author- 
ization public key, said management machine com- 
prising: 

means for managing, for each negotiable card 
type, the pair comprising said card authoriza- 
tion private key, which differs for each negotia- 
ble card type, and said card authorization 
public key, and the pair comprising said 
accounting machine authorization private key 
and said accounting machine authorization 
public key; and 

means for. in order to issue a negotiable card, 
generating a card signature private key, which 
is inherent to said negotiable card, and a card 
certificate, and for generating a negotiable card 
by using said card authorization private key. 
which corresponds to the type of said negotia- 
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ble card, and said accounting machine authori- 
zation public key. 

173. A mobile electronic commerce system according to 
claim 3, wherein said electronic wallet includes s 
means for generating first identification information 
for identifying a transaction conducted with said 
supply side, and for transmitting said first identifica- 
tion information to said supply side; wherein said 
supply side includes means for generating second w 
identification information for identifying a transac- 
tion conducted with said electronic wallet, and for 
transmitting said second identification information 
to said electronic wallet; wherein said electronic 
wallet includes means for generating said electronic 15 
check that contains first said information and said 
second information; and wherein said supply side 
includes means for generating a receipt that con- 
tains said first identification information and said 
second identification information. 2 o 

174.A mobile electronic commerce system according to 
claim 50, wherein said first electronic wallet 
includes means for generating first identification 
information for identifying an electronic payment 25 
card transfer process performed with said second 
electronic wallet, and for transmitting said first iden- 
tification information to said second electronic wal- 
let; wherein said second electronic wallet includes 
means for generating second identification informa- so 
tion for identifying an electronic payment card trans- 
fer process performed with said first electronic 
wallet and for transmitting said second identifica- 
tion information to said first electronic wallet; 
wherein said first electronic wallet includes means 35 
for generating said payment card transfer certificate 
message that contains said first identification infor- 
mation and said second identification information; 
and wherein said second electronic wallet includes 
means for generating said payment card receipt 40 
message that contains said first identification infor- 
mation and said second identification information. 

175. A mobile electronic commerce system according to 
claim 52, wherein said first electronic wallet 45 
includes means for generating first identification 
information for identifying an electronic telephone 
card transfer process performed with said second 
electronic wallet, and for transmitting said first iden- 
tification information to said second electronic wal- so 
let; wherein said second electronic wallet includes 
means for generating second identification informa- 
tion for identifying an electronic telephone card 1 
transfer process performed with said first electronic 
wallet, and for transmitting said second identifica- ss 
tion information to said first electronic wallet; 
wherein said first electronic wallet includes means 
for generating said telephone card transfer certifi- 



cate message that contains said first identification 
information and said second identification informa- 
tion; and wherein said second electronic wallet 
includes means for generating said telephone card 
receipt message that contains said first identifica- 
tion information and said second identification infor- 
mation. 

176. A mobile electronic commerce system according to 
daim 54, wherein said first electronic wallet 
includes means for generating first identification 
information for identifying an electronic ticket trans- 
fer process performed with said second electronic 
wallet, and for transmitting said first identification 
information to said second electronic wallet; 
wherein said second electronic wallet includes 
means for generating second identification informa- 
tion for identifying an electronic ticket transfer proc- 
ess performed with said first electronic wallet, and 
for transmitting said second identification informa- 
tion to said first electronic wallet; wherein said first 
electronic wallet includes means for generating said 
ticket transfer certificate message that contains 
said first identification information and said second 
identification information; and wherein said second 
electronic wallet includes means for generating said 
ticket receipt message that contains said first iden- 
tification information and said second identification 
information. 

177.A mobile electronic commerce system according to 
claim 54, wherein said first electronic wallet 
includes means for generating first identification 
information for identifying a negotiable careJ transfer 
process performed with said second electronic wal- 
let, and for transmitting said first identification infor- 
mation to said second electronic wallet; wherein 
said second electronic wallet includes means for 
generating second identification information for 
identifying a negotiable card transfer process per- 
formed with said first electronic wallet, and for 
transmitting said second identification information 
to said first electronic wallet; wherein said first elec- 
tronic wallet includes means for generating said 
payment card transfer certificate message that con- 
tains said first identification information and said 
second identification information; and wherein said 
second electronic wallet includes means for gener- 
ating said payment card receipt message that con- 
tains said first identification information and said 
second identification information. 

78-A recording medium on which is stored a program 
for an electronic payment card used by an elec- 
tronic wallet in a mobile electronic commerce sys- 
tem for paying, via wireless communication means, 
a required amount from said electronic wallet that 
includes said wireless communication means, and 
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for receiving a product or a service, or a required 
permission, from a supply side, and on which said 
program for said electronic payment card is so 
stored as to be readable by a computer, wherein 
said electronic payment card includes a payment 
card program, presented card information that 
describes the contents of said electronic payment 
card that is issued, and a card certif icate for proving 
that said electronic payment card is real; wherein 
said payment card program further includes man- 
agement information for the status of said elec- 
tronic payment card, and payment card program 
data that specifies the operations performed by 
said electronic payment card; and wherein said pre- 
sented card information is accompanied by the dig- 
ital signature of the owner of the service providing 
means. 

179. A recording medium according to claim 178, 
wherein said payment card program includes a card 
signature private key that is used for a digital signa- 
ture for an electronic payment card, and wherein 
said card certificate is a public key certificate that 
verifies a card signature public key that is paired 
with said card signature private key. 

180. A recording medium according to claim 178, 
wherein a clearing program module for said elec- 
tronic payment card includes two cryptographic 
keys, an accounting machine authorization private 
key and a card authorization public key; and 
wherein said payment card program includes an 
accounting machine authorization public key that is 
paired with said accounting machine authorization 
private key, and a card authorization private key 
that is paired with said card authorization public 
key. 

181 -A recording medium according to claim 178, 
whereof said payment card program data includes 
a transaction module program, for specifying the 
procedures employed for message data that are 
exchanged by said electronic wallet and electronic 
payment card settlement means, a display module 
program, for specifying a display for an electronic 
payment card, and representative component infor- 
mation for an electronic payment card; and 
whereof, in accordance with said transaction mod- 
ule program for said electronic payment card, a 
central processing unit in said electronic wallet 
processes said message data that are exchanged 
with said electronic payment card clearing means, 
and displays said representative component infor- 
mation in accordance with said display module pro- 
gram for said electronic payment card, so that said 
electronic payment card is displayed on display 
means of said electronic wallet. 



182.A recording medium on which is stored a program 
for a negotiable card used by an electronic wallet in 
a mobile electronic commerce system for paying, 
via wireless communication means, a required 
5 amount from said electronic wallet that includes 
said wireless communication means, and for 
receiving a product or a service, or a required per- 
mission, from a supply side, and on which said pro- 
gram for said negotiable card is so stored as to be 
w readable by a computer, wherein said negotiable 
card includes a negotiable card program, presented 
card information that describes the contents of said 
negotiable card that is issued, and a card certificate 
for proving that said negotiable card is authentic; 
wherein said negotiable card program further 
includes management information for the status of 
said negotiable card, and negotiable card program 
data that specifies the operations performed by 
said negotiable card; and wherein said presented 
card information is accompanied by the digital sig- 
nature of the owner of the service providing means. 
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183. A recording medium according to claim 182, 
wherein said electronic negotiable card program 

25 includes a card signature private key that is used for 
a digital signature for an electronic negotiable card, 
and wherein said card certificate is a public key cer- 
tificate that verifies a card signature public key that 
is paired with said card signature private key. 

30 

184. A recording medium according to claim 182, 
wherein a clearing program module for said elec- 
tronic negotiable card includes two cryptographic 
keys, an accounting machine authorization private 

35 key and a card authorization public key; and 
wherein said negotiable card program includes an 
accounting machine authorization public key that is 
paired with said accounting machine authorization 
private key, and a card authorization private key 

40 that is paired with said card authorization public 
key. 

185. A recording medium according to claim 178, 
whereof said negotiable card program data 

45 includes a transaction module program, for specify- 
ing the procedures employed for message data that 
are exchanged by said electronic wallet and elec- 
tronic negotiable card settlement means, a display 
module program, for specifying a display for an 

so electronic negotiable card, and representative com- 
ponent information for an electronic negotiable 
card; and whereof, in accordance with said transac- 
tion module program for said electronic negotiable 
card, a central processing unit in said electronic 

55 wallet processes said message data that are 
exchanged with said electronic negotiable card 
clearing means, and displays said representative 
component information in accordance with said dis- 
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play module program for said electronic negotiable 
card, so that said electronic negotiable card is dis- 
played on display means of said electronic wallet. 

186. A recording medium on which is stored a program s 
for an electronic telephone card used by an elec- 
tronic wallet in a mobile electronic commerce sys- 
tem for paying, via wireless communication means, 
a required amount from said electronic wallet that 
includes said wireless communication means, and w 
for receiving a product or a service, or a required 
permission, from a supply side, and on which said 
program for said electronic telephone card is so 
stored as to be readable by a computer, wherein 
said electronic telephone card includes a telephone is 
card program, presented card information that 
describes the contents of said electronic telephone 
card that is issued, and a card certificate for proving 
that said electronic telephone card is authentic- 
wherein said telephone card program further 20 
includes management information for the status of 
said electronic telephone card, and telephone card 
program data that specifies the operations per- 
formed by said electronic telephone card; and 
wherein said presented card information is accom- 25 
panied by the digital signature of the owner of the 
service providing means. 



187.A recording medium on which is stored a program 
for an electronic telephone card used by an elec- 30 
tronic wallet in a mobile electronic commerce sys- 
tem for paying, via wireless communication means, 
a required amount from said electronic wallet that 
includes said wireless communication means, and 
for receiving a product or a service, or a required 35 
permission, from a supply side, and on which said 
program for said electronic telephone card is so 
stored as to be readable by a computer, wherein 
said telephone card program includes a card signa- 
ture private key that is used for a digital signature 40 
for an electronic telephone card, and wherein said 
card certificate is a public key certificate that veri- 
fies a card signature public key that is paired with 
said card signature private key. 

45 

188.A recording medium on which is stored a program 
for an electronic telephone card used by an elec- 
tronic wallet in a mobile electronic commerce sys- 
tem for paying, via wireless communication means, 
a required amount from said electronic wallet that so 
includes said wireless communication means, and 
for receiving a product or a service, or a required 
permission, from a supply side, and on which said 
program for said electronic telephone card is so 
stored as to be readable by a computer, whereof, in 55 
accordance with said transaction module program 
for said electronic telephone card, a central 
processing unit in said electronic wallet processes 



said message data that are exchanged with said 
eJectronic telephone card clearing means, and dis- 
plays said representative component information in 
accordance with said display module program for 
said electronic telephone card, so that said elec- 
tronic telephone card is displayed on display means 
of said electronic waJIet, and whereof said tele- 
phone card program data includes a transaction 
module program, for specifying the procedures 
employed for message data that are exchanged by 
said electronic wallet and electronic telephone card 
settlement means, a display module program, for 
specifying a display for an electronic telephone 
card, and representative component information for 
an electronic telephone card. 

189. A recording medium on which is stored a program 
for an electronic ticket used by an electronic wallet 
in a mobile electronic commerce system for paying, 
via wireless communication means, a required 
amount from said electronic wallet that includes 
said wireless communication means, and for 
receiving a product or a service, or a required per- 
mission, from a supply side, and on which said pro- 
gram for said electronic ticket is so stored as to be 
readable by a computer, wherein said electronic 
ticket includes a ticket program, presented card 
information that describes the contents of said elec- 
tronic ticket that is issued, and a card certificate for 
proving that said electronic ticket is authentic; 
wherein said ticket program further includes man- 
agement information for the status of said elec- 
tronic ticket, and ticket program data that specifies 
the operations performed by said electronic ticket; 
and wherein said presented card information is 
accompanied by the digital signature of the owner 
of the service providing means. 

190. A recording medium according to claim 189, 
wherein said ticket program includes a ticket signa- 
ture private key that is used for a digital signature 
for an electronic ticket, and wherein said ticket cer- 
tificate is a public key certificate that verifies a ticket 
signature public key that is paired with said ticket 
signature private key. 



191. A recording medium according to claim 189, 
wherein an examination program module for said 
electronic ticket includes two cryptographic keys, a 
gate authorization private key and a ticket authori- 
zation public key; and wherein said ticket program 
includes a gate authorization public key that is 
paired with said gate authorization private key, and 
a ticket authorization private key that is paired with 
said ticket authorization public key. 

192. A recording medium according to claim 189, 
whereof said ticket program data includes a trans- 
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action module program, for specifying the proce- 
dures employed for message data that are 
exchanged by said electronic wallet and electronic 
ticket examination means, a display module pro- 
gram, for specifying a display for an electronic pay- 
ment card, and representative component 
information for an electronic ticket; and whereof, in 
accordance with said transaction module program 
for said electronic ticket, a central processing unit in 
said electronic wallet processes said message data 
that are exchanged with said electronic ticket exam- 
ination means, and displays said representative 
component information in accordance with said dis- 
play module program for said electronic ticket, so 
that said electronic ticket is displayed on display 15 
means of said electronic wallet. 

193. A recording medium on which a program for a pay- 
ment card, which is used for electronic commerce 
that employs an electronic wallet, is so stored as to 
be readable by a computer, and whereon as infor- 
mation indicating the contents of a negotiable card, 
included for said payment card, is ASCII informa- 
tion for which tag information that describes the 
information type is additionally provided. 

194. A recording medium on which a program for a tele- 
phone card, which is used for electronic commerce 
that employs an electronic wallet, is so stored as to 
be readable by a computer, and whereon as infor- 
mation indicating the contents of an electronic tele- 
phone card, included for said telephone card, is 
ASCII information for which tag information that 
describes the information type is additionally pro- 
vided. 

195. A recording medium on which a program for a 
ticket, which is used for electronic commerce that 
employs an electronic wallet, is so stored as to be 
readable by a computer, and whereon as informa- 
tion indicating the contents of an electronic ticket, 
included for said ticket, is ASCII information for 
which tag information that describes the information 
type is additionally provided. 



20 



25 



30 



35 



40 



45 



50 



55 



210 



EP0 950 968 A1 




211 



EP 0 950 968 A1 




212 



EP 0 950 968 A1 




213 



EP 0 950 968 A1 






O 
CO 



214 



BP 0 950 968 A1 



FIG. 3D 



FIG. 3E 



REGISTERED 

OOayment CARD 

10000 
CREDIT REMAINING 

8,712 

PAYMENT 

| 1,050 | J 



SP€6CH| MODE END 



esse 




.a. 



100 



REGISTERED 
COm£FH0lCCtftD 5000 

RBWNWG CREDIT AMOUNT 

3,570 

TELEPHONE NUMBER 



[0312345678"!) 



(speech) [mode] [end 

EE (DO 
LTD0Q 
ID GDGE 

oir# 




.o ^ 



100 



215 



EP 0 950 968 A1 




216 



EP 0 950 968 A1 



FIG. 4 




217 



EP 0 950 968 A1 




218 



EP 0 950 968 A1 




219 



EP 0 950 968 A1 




220 



EP 0 950 968 A1 



LU 

op 

ULi— J0C> 
Zjlu-<UJ 
Ulh-OQ 



o 
o 

00 



CD- 
CO 



CO 



o 

00 



a: 
o 



CO 




221 



EP 0 950 968 A1 




222 



EP 0 950 968 A1 




223 



EP 0 950 968 A1 




224 



EP 0 950 968 A1 




225 



EP 0 950 968 A1 




226 



EP 0 950 968 A1 




CM 
5 



O 
7* 



Si 

to " 




:C2 JZCC< 



CO 
iUJ 

iOC 



!3: 



55 = 



CO 


<0 






r-» 


tf> 


CO 




to 


*<r 


<M 


o 


tf> 


CO 




o> 




CM 


o 


oo 


CO 




cr> 






O 


CO 


CO 








tr> 



7<- 



liliS 

— t— CVJ CO 



5 



o 

CD 

LL 



co 

T— 



227 



EP 0 950 968 A1 



CO 



CD 

T— 



I p t 

I — . I 

:Si 

Si j 

Q 

s 

d 



UJ 



CM 

o 




..lis 



II i£ 



i- co in n 

r- CO U) 

i- m ift N 
— en if> f-» 



CO <o CM 
CO to ^ OJ 
CO CO T CM 
CO CO ^ CM 



o 

CM 



o 
I— 
o 

i 



pSii 



s 

o 

I 




228 



EP0 950 968 A1 



00 O i- 
O o y- 
CO CO CO 




229 



EP 0 950 968 A1 



CO 
O 
CO 





00 


o 


o 


CO 

I 


CO 

— I— 1 






X 






o 


X 






ITP 
tit' 












CO 




§ 








O 










i 














u. 







CO CO 




230 



EP 0 950 968 A1 




EP 0 950 968 A1 



FIG. 17 



1700 

FUNDAMENTAL 
PROGRAM OBJECTS 
AREA 



1701 

SERVICE DATA AREA 



1702 
USER AREA 



1703 
WORK AREA 



1704 

TEMPORARY AREA 




RAM 1502 



1 705DATA MANAGEMENT 
INFORMATION 



1 706PERSONAL 
INFORMATION 



1707 PORTRAIT IMAGE 
DATA 



1708USER'S PUBLIC KEY 
CERTIFICATE 

1 709 USER P REFERENCE 

1710 TELEPHONY 
INFORMATION 



1711 



CREDITCARD UST 



1712 



TICKET LIST 



1713 



PAYMENT CARD LIST 



1714 



TELEPHONE CARD USTl 



1715 



USE LIST 



1716 



OBJECT DATA AREA 



SERVICE OATA AREA 1701 



232 



EP 0 950 968 A1 



FIG. 18 



1712 TICKET UST 



1823- - TICKET NAME 



1824- - TICKET NUMBER 



1825- - TICKET STATUS 

1826- - 



ELECTRONIC TICKET 
ADORESS 



1827- - ACCESS TIME 



1705 DATA MANAGEMENT 
INFORMATION 



t828- CARD NAME 



t829- • NUMBER 



1832- - 
1833- 



1713 
PAYMENT CARD LIST 



1830- CARD S TATUS 
1831- 



AMOUNT OF STORED 
VALUE 



ELECTRONIC PAYMENT 
CARD ADDRESS 



ACCESS TIME 



I 



1714 TELEPHONE CARD UST 



1834- CARD NAME 



1835- NUMBER 



1838- 
1839- 



1836- • CARD ST ATUS 
1837- 



AMOUNT OF STORED 
VAL.VE 



ELECTRONIC TELEPHONE 
CARD ADDRESS 



ACCESS TIME 



I 



J 



1800 
1801 
1802- 
1803- 
1804- 
1805- 
1806- 



LASTOATA UPDATE 



1807- 
1808- 



NEXTOATA UPDATE 



TERMINAL STATUS 



PERSONAL 
INFORMATION ADDRESS 



PORTRAIT IMAGE 
DATA ADDRESS 



USER'S PUBLIC 
KEY CERTIFICATE 



USER PREFERENCE 
-ADQBESS- 



TELEPHONYNFOflMATION 
ADDRESS 




CREDITCARD 
LIST ADDRESS 



TICKET UST ADDRESS 



PAYMENT CARD 
UST ADDRESS 



TELEPHONE CARD 
UST ADDRESS 



USE UST ADDRESS 



1812 



1 706 



PERSONAL 
INFORMATION 




1707 



PORTRAIT 
IMAGE DATA 



1708 



USER'S PUBUC 
KEY CERTIFICATE 




1809 1813- LAST CALL NUMBER 



709 

USER PREFERENCE 



1710 

ELEPHONY INFORMATION 



1814- 



1815- 



ADDRESS BOOK 
ADDRESS 



SHORTCUT 
FILE ADDRESS 



1711 CREDITCARD LIST 



1843 



USE UST 1715 



REQUEST NUMBER 



'1841- SERVICE CODE 
1842- 



USE TIME 



USE INFORMATION 
ADDRESS 



I 



EFFECTIVE PERIOD 



1816- | CREDITCARD NAME 

1817- 1 CREDITCARD NUMBER 
1818- 
1819- 
1820- 
1821- 
1822- " 



CREDITCARD STATUS 



CREDITCARD IMAGE 
DATA ADDRESS 



CREDITCARD OBJECT 
DATA ADDRESS 



ACCESS TIME 



J 



233 



EP 0 950 968 A1 



FIG. 19 



ELECTRONIC TICKET 




TRANSACTION MODULE 



— 1930 



REPRESENTATION 
MODULE 



REPRESENTATION 
COMPONENT 



• 1931 



.-1932 



REGISTERED TIUKt I _. 
rcnTlFlCATE HEADER 


-1934 


TICKET ID 


-1935 


TICKET DIGITAL SIGN _. 
PUBLIC KEY 


-1936 


TICKET CERTIFICATE ID - 


-1937 


TERM OF VALIDITY - 


-1938 


SERVICE PROVIDER ID - 


.-1939 


CERTIFICATE ISSUED TlME - 
1 ifK= 


-1940 
J- 1933 



234 



EP 0 950 968 A1 



FIG, 



20 

ELECTRONIC PAYMENT CARD 



2029 
2003 
2000 




TRANSACTION MODULE +- 2030 
2031 
2032 



REPRESENTATION 
MODULE 



REPRESENTATION 
COMPONENT 



REGISTERED CARD 
CERTIFICATE HEADER 



CARD ID 



CARD DIGITAL SIGN 
PUBLIC KEY 



2034 

2035 
2036 

CARD CERTIFICATE ID -ft- 2037 
2038 

SERVICE PROVIDER ID -ft- 2039 
2040 



CERTIFICATE ISSUED TIME - 



®3-2033 



235 



EP 0 950 968 A1 



FIG. 21 

ELECTRONIC TELEPHONE CARD 



5 
< 
cc 

8 

cc 

DL 

Q 
CE 
< 
O 
UJ 

§ 

X 
Q_ 
Ui 
— I 
UJ 



>- 



Q 

5 

o 

& 

UJ 

CO 
LU 
CC 
Q- 



>- 



UJ 

o 



cc 

1X1 

o 

s 

< 

o 



TELEPHONE CARD 
PROGRAM HEADER 



CARD NAME 



CARD ID 



CARD STATUS 



AMOUNT OF STORED 
VALUE 



MICRO CHECK ISSUED 
NUMBER 



CARD DIGITAL SIGN 
PRIVATE KEY 



CARD PRIVATE KEY 



ACCOUNTING EQUIPMENT. 
PUBLIC KEY 



TELEPHONE CARD 
PROGRAM DATA 



PRESENTING TICKET 
HEADER 



TICKET CODE 



•2113 



TICKET ID 



CARD INFORMATION 



TELEPHONE CAHD 
ISSUER IP 



TERM OF VALIDITY 



SERVICE PROVIDER ID 



TCARD ISSUED TIME 



CARD CERTIFICATE 
HEADER 



CARD ID 



TICKET DIGITAL SIGN 
fl |fl|,| f f KEY 



CARD CERTIFICATE ID 



TERM OF VALIDITY 



SERVICE PROVIDER ID 



CERTIFICATE ISSUED TIME" 

k PL % 21g3. 



2118 

-2119 

2120 
2121 
•2122 

2123 



2100 



TRANSACTION MODULE 



REPRESENTATION 
MODULE 



REPRESENTATION 
COMPONENT 



2130 



--2131 



— 2132 



REGISTERED CARD 
fiFRTlFICATE HEADER 



CARD ID 



CARD DIGITAL SIGN 
PUBLIC KEY 



CARD CERTIFICATE ID -•- 



TERM OF VALIDITY 



SERVICE PROVIDER ID -■- 



CERTIFICATE ISSUED TIME - ' — 



2134 

2135 
2136 

2137 
2138 
2139 
2140 



HE3-2133 



236 



EP 0 950 968 A1 





2211 


-2232 


CO*- * 


SOUND 
CONTROLLER 


oot 




Oi 
o 



CM 



00 
CM 
CM 



CO 

o 

CM 




CM CO 
CM CM 
CM CM 



O 
CM 



^ CM CM 
S>CMCM 



C\J 
CM 

CD 



CM CM 
CM CM 
CM CM 




CM 
CM 

— I — M 



237 



EP 0 950 968 A1 




238 



EP 0 950 968 A1 




239 



EP 0 950 968 A1 



FIG. 24 



2400 

FUNDAMENTAL 
PROGRAM OBJECTS 
AREA 



2405 DATA MANAGEMENT 
INFORMATION 



24 |8IrCHANT INFORMATION 

1 2407 MERCHANTS PUBLIC 
KEY CERTIFICATE 

12408 

MERCHANT PREFERENCE 



|2409 

EXAMINING TICKET LIST 



2401 
SERVICE DATA AREA 



2402 
MERCHANT AREA 



2410 TRANSACTION LIST 



2403 
WORK AREA 



2411 

AUTHORIZATION REPORT US1 



SERVICE DATA AREA 2401 



2404 
TEMPORARY AREA 



RAM 2202 



240 



EP 0 950 968 A1 



FIG. 25 



2405 DATA MANAGEMENT 
INFORMATION 



2500- . LAST DATA UPDATE 



_ . TERMINAL STATUS 



2507- 
2508- 



2501 - I- NEXT DATA UPDATE 
2502 
2503 
2504 
2505 
2506 



MERCHANT 
INFORMATION ADDRESS 

MERCHANTS PUBLIC KEY 
CERTIFICATE ADDRESS 



MERCHANT PREFERENCE 
ADDRESS 



EXAMINING TICKET 
LIST ADDRESS 



TRANSACTION LIST 
ADDRESS 
AUTHORIZATION Rf-POflT 
LIST ADDRESS 



2406 MERCHANT 
INFORMATION 



2407 MERCHANTS PUBLIC 
KEY CERTIFICATE 



2408 MERCHANT 
PREFERENCE 



2409 EXAMINING TICKET LIST 



TICKET NAME 


— 2509 


TICKET CODE 


— 2510 


TICKET ISSUER ID 


— 2511 


TERM OF VALIDITY 


— 2512 


GATE PRIVATE KEY 


— 2513 


TICKET PUBLIC KEY 


— 2514 


TICKET EXAMINATION 
MODULE ADDRESS 


— 2515 







T 



2410 TRANSACTION LIST 



TRANSACTION NUMBER 



SERVICE CODE 



TRANSACTION TIME 
TRANSACTION 



INFORMATION ADDRESS . _ 2519 



2516 
2517 
2518 



J 



241 1 AUTHORIZATION REPORT LIST 

2520 



AUTHORIZATION REPORT 
ADDRESS, 



J 



241 



EP 0 950 968 A1 



o o o 
to m in 



oo a> 
o o o 
m in w 




CM 

5/ 

CM 



CM 01 CM 



CO 
CM 



CO 
CM 



CM 
CM 



o 

s 

Qq<: 



CO 
CO 

^CM 
CO 
VCM 



CO 

CO 
CM 



m 

CO 

-CM 



ii 



JO to 

CMt- 
^CO 
"V^CM 



§8 



U) 
CD 
CM 

I 



CO 
CM 

CD 



o 

J 



i8i 



— QT 

o 

co OC 
CMLU 



co 

/CM 



$6 
co^n 
ojco 

CM 



CO 
CM 



3 



O 



o 
a: 



o 
o 



a* 

CM 

co. 

CM 



CO 
CM 
CO 
CM 

L_ 



00 

CO 
CM 

u 



CO 






CM 










5< 




R0 





o 
in 



I 



occc 



s 

CM 



lu O 
co a. 



CM CO 

CO CO 
CM CM 



8 

CO 
CM 



I 

CM 
CO CO 
CO CO 
CM CM 



COQ-O 



CM 
CO 
CM 



o 



242 



EP 0 950 968 A1 



t in co 
o o o 

W to to 



o 



.LI 



00 

o 



o 
o 
in 



co 
o 



4x1 



KEYCTL ) 



UJCO 





31 




i— 




o 




CO 

ad 



18S 



SO 



CM 
LL 




CO 



O 
CD 

3 

i 

o 

QC 

8 



CM 
O 

CM 



o 
<o 



cc 

LU 



O 



co 
o 
in 



Q 
O 



o 
cc 

Q_ 
UJ 
UJ 



O 
CO 
CM 



CO 
CVI 
CO 
CM 



1 

oo 

CO 
CM 



2 
< 



o 

CO 

k CM 



o 
o 
,co 

CM 



CM 
O 
CO 



/CM 



CO 

o 

CO 



ii 



'CM 



<3> 

LU<0 
COCLO 





o 


' UOSSi 
OIHdVUOO. 


^CM 


CRYP1 
PROCl 


I s - 
O 




CO 




/CM 


DATA 
CODEC 





243 



EP 0 950 968 A1 




244 



EP 0 950 968 A1 



FIG. 28 



2800 

FUNDAMENTAL 
PROGRAM OBJECTS 
AREA 



1 2805 DATA MANAGEMENT 
INFORMATION 



[2806 MERCHANT 

INFORMATION 



2807 MERCHANTS PUBLIC 
KEY CERTIFICATE 



IZtJOS MERCHANT 
PREFERENCE 



1 2809 TELEPHONY 
INFORMATION 



2801 
SERVICE DATA AREA 



2810 



AVAILABLE 
CREDITCARD LIST 



2802 

MERCHANT AREA 



[ 281 1 AVAILABLE PAYMENT 
CARD LIST 



2803 
WORK AREA 



281 2 TRANSACTION LIST 



2804 
TEMPORARY AREA 



2813 AUTHORIZATION 
REPORT LIST 



SERVICE DATA AREA 2801 



RAM 2602 



245 



EP 0 950 968 A1 



FIG. 29 



2805 DATA MANAGEMENT 
INFORMATION 



2900 - 



LAST DATA UPDATE 



9A1 D AVAILABLE CREDTTCARD LIST 



2914- 
2915 
2916i 



CREDITCARDNAME 



2901 -- 



NEXT DATA UPDATE 



1 



T 



?qn?- f- TERMINAL STATUS 



2903- 



KE 



2904- z. 



2905- z 



MERCHANT PREFERENCE 
ADDRESS 



TELEPHONY INFORMATION 
2906+" ADDRESS 



5>ai 1 AVAILABLE PAYMENT CARD UST 


2917- 


CARD NAME 


2918- 


I CARD CODE 


2919- 
2920- 


PAYMENT CARD ISSUER ID 


TERM OF VALIDITY 


2921- 




2922- 


CARD PUBLIC KEY 


2923- 




• 



2907 



2908- 
2909 
2910 



TRANSACTION UST 
ADDRESS 



""fflBBBBf 



PORT 



i 



2806 1 
MERCHANT INFORMATION! 



2807 

MERCHANTS PUBLIC 
KEY CERTIFICATE 



I* 12808 

MERCHANT PREFERENCE 



2809 TELEPHONY INFORMATION 



LAST CALL NUMBER 



ADDRESS BOOK ADDRESS] 
SHORTCUT FILE ADPRESSj. 291 3 




9ft 1 9 TRANSACTION LIST 



TRANSACTION NUMBER -2924 
SERVICE CODeJ-2925 



TRANSACTION TIME 



.nfoWMress 



-2926 
-2927 



J 



T 



2813 AUTHORIZATION 
REPORT UST 

^A« EP0BT 



1 



i 



246 



EP 0 950 968 A1 



<N O) 
O O 
CO CO 



ui 

a: 



O 

CO 



CD 

o 

CO " 



CM 

O 
CO 



S lO © N CO t— CM 
o O O O O t- t- 
CO CO CO CO CO CO CO 



o 

CO 

o 

CO 



o 
o 

CO 



CO 



5 j-s 



CO 
CO 



|8 




HE 



CO 
-O 



§8 J-co 



CO 
CM 



ISr- 



11 



"3 

CO 



Q 

8 



CO 



CO 

o 

-co 



o 

CO 



O 
CO 



8 



-i 



CO 



o 

CO 




— xt JGlo co 

lOR «coo 

o ro 

CO 

CO 

co jr 

o ^co 



cog 



^_ o 

o 

CO 




247 



EP 0 950 968 A1 





o * 




o 


O < 


5 


CO 




CO 






4-i 










UJ 




cc 








UJ 






z 






cc 




1 






LU 








LU 










o. 


UJ 




o 




CO 






cc 




o 






o 




:=> 

3 



CO 

5^ 



LOCO CO 

o o o 

CO CO CO 




248 



EP 0 950 968 A1 




249 



EP 0 950 968 A1 



FIG. 32 



3200 
FUNDAMENTAL 

PROGRAM OBJECTS 

AREA 



1 3205 DATA MANAGEMENT 
| INFORMATION 

13206 MERCHANT 
1 INFORMATION 



3207 MERCHANTS PUBLIC 
KEY CERTIFICATE 

13208 MERCHANT 
1 PREFERENCE 

13209 TELEPHONY 
INFORMATION 



3201 
SERVICE DATA AREA 



3202 

MERCHANT AREA 



3210 AVAILABLE 

CREDITCARD LIST 



3211 AVAILABLE PAYMENT 
CARD LIST 



321 2 TRANSACTION LIST 



3203 
WORK AREA 



3213 AUTHORIZATION 
REPORT UST 



3204 
TEMPORARY AREA 



321 4 OBJECT DATA AREA 



R AM 3002 



SERVICE DATA AREA 3201 



250 



EP 0 950 968 A1 



FIG. 33 



3205 DATA MANAGEMENT 
INFORMATION 



3300 

321 0 AVAILABLE CREOITCARD LIST 3301 

3302 
3303 



- - LASTOATA UPDATE 



3314- CREOITCARD NAME 



3315- 



3316- 



SERVICECODE 
LIST ADDRESS 



CREOITCARD CLEARING 
PROGRAM ADDRESS 



X 



. _ NEXT DATA UPDATE 



J 



3306- - 



3211 
3317 
3318 
3319 
3320 
3321 
3322- 
33234 



AVAILABLE PAYMENT CARD UST 



3307 



CARD NAME 



CARD CODE 



PAYMENT CARD ISSUER ID 



TERM OF VALIDITY 



ACCOUNTING EQUIPMENT 
PRIVATE KEY 



CARD PUBLIC KEY 



PAYMENT CARD ACCOUNTING 
MODULE ADDRESS 



3308 
3309-t 
3310 



TERMINAL STATUS 



MERCHANT INF 
ADDRE 



in 



3206 

MERCHANT INFORMATION 



3MATI0N1 



3207 
MERCHANrS PUBLIC 
KEY CERTIFICATE 



3305- - 



MERCHANT PREFERENCE 
ADDRESS 



TELEPHONY INFORMATION 
ADDRESS 



""warn™ 



TRANSACTION LIST 
ADDRESS 



r 



3208 

MERCHANT PREFERENCE 



3209 TELEPHONY INFORMATION 



LAST CALL NUMBER 



ADDRESS BOOK ADDRESS. 



SHORTCUT FILE ADDRESS .33^ 



-3311 
-3312 



' r 32 1 2 TRANSACTION LIST 



TRANSACTION NUMBER 



-3324 



SERVICE CODE 
TRANSACTION TIME .3325 

3327 



TRANSACTION 
INFORMATION ADDRESS 



T 



J 



3313 AUTHORIZATION 
REPORT LIST 



i 



(AUTHORIZATION REPORT 
ADDRESS 



251 



EP 0 950 968 A1 




CO 
LL 







3446j 








7 




EXTERNAL 
INTERrAuc 

__ — _i — 



CO 

o 

/CO 



CO 
CO 

co 



is 

58 



o> O 

OJ CO 
CO CO 

L_ 



o 
co\| 
to 

CO 

~~ CO 



DC 

1 

ZD 

8 



o 




CO 
CO 



« o o 



O 
O 

S 

o 



CO 
CO 



o 

CO 



CO 




252 



EP 0 950 968 A1 




253 



EP 0 950 968 A1 




254 



EP 0 950 968 A1 



FIG. 36 



3600 

FUNDAMENTAL 

PROGRAM OBJECTS 
AREA 



|3604 DATA MANAGEMENT 
INFORMATION 

|3605 MERCHANT 
_ INFORMATION 

13606 MERCHANT'S PUBLIC 
KEY CERTIFICATE 

13607 MERCHANT 
REFERENCE 



3601 
SERVICE DATA AREA 



3602 
WORK AREA 



3608 AVAILABLE PAYMENT 
CARD LIST 



3609 TRANSACTION UST 



3610 OBJECT DATA AREA 



3603 
TEMPORARY AREA 



RAM 2602 



SERVICE DATA AREA 3601 



255 



EP 0 950 968 A1 



FIG. 37 



3604 DATA MANAGEMENT 
INFORMATION 



3700" 
3701- 
3702- 
3703- 
3704- 
3705- 



LAST DATA UPDATE 



NEXT DATA UPDATE 



STATUS 



MERCHANT 
INFORMATION ADDRESS 



MERCHANT'S PUBLIC KEY 
CP FfflFK- AT F ADDRESS 



MERCHANT PREFERENCE 

AVAII^PaW 
37Q6- CARD LIST ADDRESS 



TRANSACTION LIST 
3707-L— JBfiBESS— 




3605 MERCHANT 
INFORMATION 



3606 MERCHANTS PUBLIC 
KEY CERTIFICATE 



3607 MERCHANT 
PREFERENCE 



2B08 A VAILABLE PAYMENT CAR D LIST 

— 3708 



CARD NAME 



CARD CODE 



— 3709 



PAYMENT CARD ISSUER ID . _ 371 Q 
— 3711 



TERM OF VALIDITY 



ACCOUNTING EQUIPMENT 
PRIVATE KEY 



CARD PUBLIC KEY 



PAYMENT CARD ACCOUNTING 
MODULE ADDRESS 



3712 
J— 3713 
3714 



T 



3609 TRANSACTION LIST 



TRANSACTION NUMBER ._3715 



SERVICE CODE 



TRANSACTION TIME 



TRANSACTION 
INFORMATION ADDRESS - 



3716 
3717 

3718 



J 



256 



FIG. 38 



EP 0 950 968 A1 



805 



3808- 



EXTERNAL 
INTERFACE 



3816 



3807 



=p=d EEPROM 
3813 1 ^ 




3804 



3801 



^3800 



3802 



3814 



^^NjCRYPTOGRAPHIC 



PROCESSOR 



3815 



3 



DATA CODEC 



^803 
3805 
3806 



257 



EP 0 950 968 A1 



FIG. 39 



3900 

FUNDAMENTAL 
PROGRAM OBJECTS 
AREA 



13904 DATA MANAGEMENT 
' INFORMATION 

13905 COMMUNICATION SERVICE 
I PROVIDER INFORMATION 

13906 COMMUNICATION SERVICE 



PROVIDERS PUBLIC KEY CERTIF1CATE| 

13907 COMMUNICATION SERVICE 
PROVIDER PREFERENCE 



3908 



AVAILABLE TELEPHONE 
CARD UST 



3901 
SERVICE DATA AREA 



3909 TRANSACTION LIST 



3902 
WORK AREA 



SERVICE DATA AREA 3901 



3903 
TEMPORARY AREA 



RAM 3702 



258 



EP 0 950 968 A1 



FIG. 40 



3904 DATA MANAGEMENT 
INFORMATION 



4000 
4001 
4002 

4003 
4004 
4005 

4006- 
40074 



LAST DATA UPDATE 



NEXT DATA UPDATE 



STATUS 



COMMUNICATION SERVICE 
PROVIDER INFORMATION ADDRESS ' 



COMMUNICATION SERVICE PROVIDER'S 
PUBLIC KEY CERTIFICATE ADDRESS / 




COMMUNICATION SERVICE 
PROVIDER PREFERENCE ADDRESS 



AVAILABLE TELEPHONE 
CARD LIST ADDRESS 



TRANSACTION LIST ADDRESS \ 



3905 



COMMUNICATION SERVICE 
PROVIDER I INFORMATION 



3906 COMMUNICATION SERVICE 

PROVIDER'S PUBLIC KEY 
CERTIFICATE 



3907 COMMUNICATION SERVICE 
PROVIDER PREFERENCE 



3908 AVAILABLE TELEPHONE CARD UST 



CARD NAME 


— 4008 


CARD CODE 


— 4009 


TELEPHONE CARD 
CARD ISSUER ID 


— 4010 


TERM OF VALIDITY 


— 4011 


ACCOUNTING EQUIPMENT 
PRIVATE KEY 


— 4012 


CARD PUBLIC KEY 


— 4013 


TELEPHONE CARD ACCOUNTING 
MODULE ADDRESS 


— 4014 



J 



3909 TRANSACTION LIST 



TRANSACTION NUMBER 



SERVICE CODE 



TRANSACTION TIME 



TRANSACTION 
INFORMATION ADDRESS 



I 



4015 

4016 
4017 

4018 



J 



259 



EP 0 950 968 A1 




CO 
O 













CD 




> < 




* CO 




: CO 




:• UJ 











LL. 



O 

o 



cc 



< 

u_ 



CO 

LU - — 

UJCO 
OCO 

co 5? 

S t 
lulu 

gs 

Zni 
uu- 



ccuj ^ 
ulOO< 



O 

5 



CM 
O 



LU / 
CD 
LU <C 
O CO ^ 
S CO LU 
CO LU O 

co2< 
— . <UJ 

i — Se 

ago 

co g! 

Quj t 
§8 



Q 
Z 
LU 



260 



EP 0 950 968 A1 



FIG. 42A 



START 



GENERATE SECRET KEY 



I 



ENCRYPT DIGITAL SIGNED 
MESSAGE 
DSIGNED A(MESSAGE) 
"* ^Wcretkey^ A(MESSAGE)) 



4200 



I 



ENCRYPT SECRET KEY USING 
PUBUC KEY OF SENDER (B) 
SECRET KEY- EC (SECRET KEY) 

PUBLIC KEY B V J 



_4201 



4202 



ADD OUTPUT AT STEP 4202 TO OUTPUT 
AT STEP 4201 

ec secretkey( d SIGNED A(MESSAGE)) 
+ EC public key b (SECRET KEY ) 
-♦ENVELOPED B(DSIGNED A(MESSAGE)) 



END 



4203 



261 



EP 0 950 968 A1 



FIG. 42B 



SECRET KEY 



MESSAGE 



4106 



4204 



MESSAGE 




ENCRYPTED WITH A GENERA) ED 
SECRET KEY (SECRET KEY) 



4205 



X- 



SECRET KEY 



(STEP4202) 



4204 



r 



SECRET KEY /, 



ENCRYP rED WITH B'S 
PUBUCWEY(PUBUCKEYB) 



4206 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY) 



1 



0 SECRE T KEY 



ENCRYPTED WITH B'S 
PUBLIC KEY (PUBUC KEY B) 



4206 



4205 




ENCRYPTED WITH A GENERATED 
ocppft KFWSECRET KEY) 



3J 



SECRET KEY 



V ? > J J J / / S S * 



ENCRYPTED WITH B'S 
PUBLIC KEY (PUBUC KEY B) 



— 4207 



262 



EP 0 950 968 A1 



FIG. 43A 



start") 

A . 

EMPLOY OWN (B) PRIVATE KEY TO DECRYPT PORTION 
OF RECEIVED DATA THAT CORRESPONDS TO OUTPUT 
AT STEP 4202 
ECpubuc key b (SECRET KEY ) 

~* ^PRIVATE KEYB (^PUBLIC KEY b(SECRET KEY )) 

— SECRET KEY 



-1 — N 1 

4300 



EMPLOY SECRET KEY (OUTPUT AT STEP 4300) TO 
DECRYPT PORTION OF RECEIVED DATA THAT 
CORRESPONDS TO OUTPUT AT STEP 4201 
EC secret key (DSIGN ED A(MESSAGE))' 
- DCsECRETKEY (EQsecrct key(DSIGNED A(MESSAGE))') 
— DSIGNEDA(MESSAGE)' 



. + » ^4301 
| END [ 



263 



EP 0 950 968 A1 




264 



EP 0 950 968 A1 



g 



< 
CD 



% hi 
lu CD 

sis 

t±f LU 



LU 



CD 




265 



EP 0 950 968 A1 



FIG. 44B 



MESSAGE' 



iiia a 




i-4306 



MESSAGE 1 



y- 

4403 

CALCULATION OF 
HASH FUNCTION 
(STEP4400) ' 




MESSAGE 
DIGEST' 



COMPARISON 



4405 



(STEP4402) 



'4404 
DECRYPTION 
(STEP4401) 



MESSAGE 

DIGEST/ 
*c 



4406 



266 



EP 0 950 968 A1 



co a. co 



f=2>co 



| 

ir co oo 

>-ccco 
clOco 



§ 

ZjCCco 

LU<>- 
HOCQ 
* 




in 



CD 

5> 



CE 

TOR 

ESSOR 


o 


3508 


cooa. 





4510 




CO 

>- 

CO 

tu 

o 

CO 



O 
O 

in 

GC 

erg 

LULU CO 
OOUJ 

0C2O 

u_i < cc 





4521 






MOBILE 
USER 
TERMINAL 
100 



LO 

CD 

LL 



SuiUJ^LU 

LUOOgP 
CC CC ill £ 

SUJUJ55 

cm co xj- io 



267 



EP 0 950 968 A1 



FIG. 46 



4610 TICKET UST 



4645— 
4646- - 



4647- - 



4649- - 



TICKET NAME 



TICKET NUMBER 



TICKET STATUS 



ELECTRONIC TICKET 
4648-1- ADDRESS 



ACCESS TIME 



I 



4611 PAYMENT CARD UST 



4650- ^ 

4651- - 



4654 



4655- - 



CARD NAME 



NUMBER 



4652- - CARD STATUS 

4653 



AMOUNT OF STORED 
VALUE 



ELECTRONIC PAYMENT 
- CARD ADDRESS 



ACCESS TIME 



461 2 TELEPHONE CARD LIST 



4656- CARD NAME 

4657- 



NUMBER 



4658-. _ CARD STATUS 



4661- - 



AMOUNT OF STORED 

46594- value 



ELECTRONIC TELEPHONE 
4660- - CARP ADDRESS 



ACCESS TIME 



4600 USER'S DATA MANAGEMENT 
I^FO^TION 

USER NAME 



T 



USER ID 



USER STATUS 



PERSONAL INFORMATION 
ADDRESS 



PORTRAIT IMAGE 
DATA ADDRESS 



14601 
PERSONAL INFORMATION 



14602 

I PORTRAIT IMAGE DATA 



I46G3USERTS PUBLIC KEY 
CERTIFICATE 



ran 

I TERMINAL PROPERTY 



14605 



USER'S PUBLIC KEY 
CERTIFICATE ADDRESS 



USER PREFERENCE 



TERMINAL PROPERTY 
ADDRESS 



USER PREFERENCE 
ADDRESS 



ACCESS CONTROL 
INFORMATION ADDRESS 



LAST DATA UPDATE 



NEXT DATA UPDATE 



TERMINAL DATA ADDRESS 



TELEPHONY INFORMATION 
ADDRESS 



CREDITCARD UST ADDRESS 



. . TICKET UST ADDRESS 



PAYMENT CARD 
LIST ADDRESS 



TELEPHONE CARD 
UST ADDRESS 



USE UST ADDRESS 

— * — 

4613 USE LIST 



[4606 ACCESS CONTROL 
I INFORMATION 



4607 TERMINAL DATA 



4632 

DATA OF FUNDAMENTAL 
PROGRAM OBJECT AREA 



4633 

DATA OF SERVICE 
DATA AREA 



4634 

DATA OF USER AREA 



4608 

\ TF1 FPHQNY INFORMATION 



4635 



LAST CALL NUMBER 



ADDRESS BOOK 
4636 1 ADORESS 



SHORTCUT FILE 
4637|- ADDRESS 



4609 CREDITCARD UST 



4662- 
4663- 
4664- 



4665- 



REQUEST NUMBER 



SERVICE CODE 



USE TIME 



USE INFORMATION 
ADDRESS 



4638- 

4639 

4640- 

4641 

4642 



4643 
4644 



CREDITCARD NAME 



CREDITCARD NUMBER 



EFFECTIVE PERIOD 



CREDITCARD STATUS 



CREDITCARD IMAGE 
DATA ADORESS 



CREDITCARD OBJECT 
DATA ADDRESS 



ACCESS TIME 



268 



EP 0 950 968 A1 



FIG. 47 



4709 AVAILABLE PAYMENT CARD UST 47Q0 MERCHANTS DATA MANA6EMFNT iHWrnimu 



4742 



4743-- 



4744- - PAYMENT CARD ISSUER ID 

4745- - 



4746 
4747- 



CARD NAME 



CARD CODE 



TERMOFVAL0ITY 



ACCOUNTING EQUIPMENT 
PRIVATE KEY 



CARD PUBLIC KEY 



4748- - PAYMENT CARD ACCOUNTING 
MODULE ADDRESS 



4751- 
4752- - 
4753- 
4754- - 
4755- 



4 71 0 AVAILABLE TR PPHQNECARD UST 

4749 

4750+ CARD CODE 



TELEPHONE CARD ISSUER ID 



TERM OF VALIDITY 



ACCOUNTING EQUIPMENT 
PRIVATE KEY 



CARD PUBUC KEY 



TELEPHONE CARD ACCOUNTING 
MODULE ADDRESS 



4727i 
4728- 



4711 EXAMINING TICKET UST 



4756- 


TICKET NAME 


4757- 


TICKET CODE 


4758- 


TICKET ISSUER ID 


4759- 


TERM OF VALIDITY 


4760- 


GATE PRIVATE KEY 


4761 - 


TICKET PUBLIC KEY 


4762- 


TICKET EXAMINATION MODULE 
ADDRESS 



MERCHANT NAME 



[ MERCHANT ID (COMMUNICATION 
_ SERVICE PROVIDER ID) 



ACCOUNTING EQUIPMENT ID 
(GATE ID) 



MERCHANT STATUS 



MERCHANT INFORMATION 
■ ADDRESS 



PUBLIC KEY CERTIFICATE 
ADDRESS 



SYSTEM PROPERTY 
ADDRESS 



MERCHANT PREFERENCE 
ADDRESS 



LAST DATA UPDATE 



NEXT DATA UPDATE 



MEMORY DATA ADDRESS 



DISK DATA ADDRESS 



TELEPHONY INFORMATION 
ADDRESS 



AVAILABLE CREDJTCARO 
LIST ADDRESS 



AVAILABLE PAYMENT 
CARD UST ADDRESS 



AVAILABLE TELEPHONE 
CARPI *TAnm^ 



EXAMINING TICKET 
LIST ADDRESS 



TRANSACTION UST 
ADDRESS 



AUTHORIZATION REPORT 
UST ADDRESS 



4701 

| MERCHANT INFORMATION I 



4702 

PUBLIC KEY CERTIFICATE 



4703 

SYSTEM PROPERTY 



4704 

MERCHANT PREFERENCE 



4705 MEMORY DATA 



4733 

DATA OF FUNDAMENTAL 
PROGRAM OBJECT AREA 



4734 

DATA OF SERVICE DATA 
AREA 



4735 

DATA OF MERCHANT 
AREA 



4706 

Disk Data 

4707 TELEPHONY 
r INFORMATION 



LAST CALL NUMBER 



ADORESSBOOK 
ADDRESS 



SHORTCUT RLE 
ADDRESS 



4739 



4740 



4708 AVAILABLE 
CREDrrnARn i ist 



CREDITCARDNAME 



SERVICE CODE UST 
ADDRESS 



\JCREDTTCARD CLEARING 
PROGRAM ADDRESS 



^ 71 2 TRANSAC TION UST 



4767-^ 



4713 AUTHORIZATION REPORTUST 



4763' -TRANSACTION NUMBER 

4764> 



"AUTHORIZATION REPORT ADDRESS I 4756 



-1 4765 
»J 4766 



/T" 



SERVICE CODE 



TRANSACTION TIME 



TRANSACTION 
INFORMATION ADDRESS 



269 



EP 0 950 968 A1 



FIG. 48 



4800 TRANSACTION PROCESSOR'S 

DATA MANAGEMENT INFORMATION 



4805- 

4806 

4807 

4808 

4809 

4810 



48114 



TRANSACTION PROCESSOR 
NAME 



TRANSACTION PROCESSOR 

ID . 



TRANSACTION PROCESSOR 
STATUS 



TRANSACTION PROCESSOR ; 
INFORMATION ADDRESS 



TRANSACTION PROCESSOR'S 
PUBUC KEY CERTIFICATE ADDRESS 



AVAILABLE CREDfTCARD LIST 
ADDRESS 



CLEARING LIST ADDRESS 




I TRANSACTION PROCESSOR 
INFORMATION 

4802 

TRANSACTION PROCESSOR'S 
PUBLIC KEY CERTIFICATE 



4803 

AVAILABLE CREDITCARD LIST 



CREDITCARD NAME |. 481 2 

4813 



SERVICE CODE LIST 
ADDRESS 



T 



<jfl(U CLEARING LIST 



CLEARING NUMBER 



4814 

SERVICE CODE 4-4815 
CLEARING TIME 4-4816 

4817 



CLEARING INFORMATION 
ADDRESS 



I 



T 



270 



EP 0 950 968 A1 



FIG. 49 



4900 TICKET ISSUER'S DATA 
MANAGEMENT INFORMATION 



4908 
4909 



_. TICKET ISSUER NAME 



TICKET ISSUER ID 



4910 
4911 
4912 
4913 
4914- 
4915- 
4916 
4917 



TICKET ISSUER STATUS 



TICKET ISSUER 
INFORMATION ADDRESS 



TICKET ISSUER'S PUBLIC KEY 
CERTIFICATE ADDRESS 



SERVICE CODE UST 
ADDRESS 



SERVICE CODE LIST 
. ADDRESS 



ELECTRONIC TICKET 
TEMPLATE UST 



TRANSACTION LIST 
ADDRESS 



USAGE REPORT UST 
ADDRFSfi 




4901 ticket ISSUER 
INFORMATION 



4902 

TICKET ISSUER'S PUBUC 
KEY CERTIFICATE 



4903 

SERVICE CODE UST 



4904 



INSTALL CARD LIST 



4905 ELECTRONIC TICKET 
TEMPLATE UST 



TEMPLATE CODE 



-4918 



TRANSACTION MODULE 
ADDRESS J- 491 g 



REPRESENTATION MODULE 
ADDRESS J- 4920 



DEFAULT REPRESENTATION 
COMPONENT ADDRESS I 4Q91 



TICKET EXAMINATION 
MODULE ADDRESS Laooo 



X 



4906 TRANSACTION LIST 



J- 



TRANSACTION NUMBER 



SERVICE CODE 



TRANSACTION TIME 



TRANSACTION 
INFORMATION ADDRESS L dQOfi 



• -4923 
-4924 
-4925 



J" 



4 907 USAGE REPORT UST 
USAGE REPORT ADDRESS 1 4927 



1 

J- 



271 



EP 0 950 968 A1 



FIG. 50 



5000 PAYMENT CARD ISSUER'S DATA 
MANAGEMENT INFORMATION 



5008- 
5009- 



5010- 



5011 - 



5013 



5014- 
5015 
5016 



5017 



PAYMENT CARD 
ISSUER NAME 



PAYMENT CARD ISSUER ID 



PAYMENT CARD 
ISSUER STATUS 



PAYMENT CARD ISSUER 
INFORMATION ADDRESS 



PAYMENT CARD ISSUER'S 
501 2 4 PUBLIC K EY CERTIFICATE ADDRESS 



SERVICE CODE 
LIST ADDRESS 



INSTALL CARD 
LIST ADDRESS 



ELECTRONIC PAYMENT CARD 
-■ TEMPLATE LIST ADDRESS 



TRANSACTION 
LIST ADDRESS 



USAGE REPORT 
1 1ST ADDRESS 




5001 

PAYMENT CARD ISSUER 
INFORMATION 



^PAYMENT CARD ISSUER'S 
PUBLIC KEY CERTIFICATE 



5003 

SERVICE CODE LIST 



r5004 I 
| INSTALL CARD LIST I 

5005 ELECTRONIC PAYMENT 
CARD TEMPLATE LIST 



TEMPLATE CODE 



TRANSACTION MODULE 
ADDRESS 



REPRESENTATION MODULE 
ADDRESS 




DEFAULT REPRESENTATION 
COMPONENT ADDRESS 



PAYMENT CARD ACCOUNTING 
MODULE ADDRESS 



5018 
5019 
5020 
5021 
-5022 



5006 TRANSACTION LIST 



TRANSACTION NUMBER -5023 



SERVICE CODE -5024 
-5025 



TRANSACTION TIME 



TRANSACTION INFORMATION 
ADDRESS 



-5026 

X 



5 007 USAGE REPORT UST 
USAGE REPORT ADDRESS X- 5027 



I 5 



272 



EP 0 950 968 A1 



FIG. 51 

51 00 TELEPHONE CARD ISSUER'S DATA 
MANAGEMENT INFORMATIO N 



5108 
5109 
5110 
5111 



5112 
5113 
5114 
5115- 
5116- 
5117- 



TELEPHONE CARD 
ISSUER NAME 



TELEPHONE CARD 
ISSUER ID 



TELEPHONE CARD 
ISSUER STATUS 



TELEPHONE CARD ISSUER 
INFORMATION ADDRESS 



TELEPHONE CARD ISSUER'S 
- PUBLIC KEY CERTIFICATE ADDRESS 



SERVICE CODE 
LIST ADDRESS 



INSTALL CARD 
LIST ADDRESS 



LECTRONIC TELEPHONE CARD 
TEMPLATE LIST ADDRESS 



TRANSACTION 
UST ADDRESS 



USAGE REPORT 
LIST ADDRESS 



5101 

TELEPHONE CARD ISSUER 
INFORMATION 

1 i)102 
(TELEPHONE CARD ISSUER'S | 
| PUBLIC KEY CERTIFICATE 



WICE CODE LIST 



5104 

INSTALL CARD LIST | 

5105 ELECTRONIC TELEPHONE 
CARD TEMPLATE LIST 



TEMPLATE CODE 




TRANSACTION MODULE 
ADDRESS 



REPRESENTATION MODULE 
ADDRESS 



DEFAULT REPRESENTATION 
COMPONENT ADDRESS . -5121 



TELEPHONE CARD ACCOUNTING 

MODULE ADDRESS -5122 



-5118 
-5119 
-5120 



5106 TRANSACTION LIST 



TRANSACTION NUMBER . .5123 



SERVICE CODE \ .Pjj9d 
TRANSACTION TIME ■ 5125 

5126 



TRANSACTION INFORMATION 
. ADDRESS 



3- 



5107 USAGE REPORT UST 
USAGE REPORT ADDRESS 4- 5 1 27 



J- 



273 



EP 0 950 968 A1 



^ \? *C CO 

LO 2fg 



0 

LL. 




< 
CM 
LO 

O 
LL 











LU 










§ 








UJ 












LL. 


LIST 


NAME 


RID 


LEPHO 
IBER 


■YCERT 
RESS 


ffi 


USER 


SE 




UBLICKI 
ADO! 


US 




0)2 

CC 

LU 


o 






CO 


a. 


o 








cc 


CM 








LU 

CO 


LO 











CO 



^co 

LUg* 
LUQ 



^ CO 

Sco 
cc UJ 
oac 
u_Q 

s§ 

cc 

UJ 

CO 
3 



o 
cm 

LO 



CO O O CM 

O O 

CM CM CM CM CM 

LO LO LO LO LO 



274 



EP 0 950 968 A1 



FIG. 52D 

5203 TICKET ISSUERS LIST 



5225 

5226 

5227 

5228 

5229 

5230 

5231- 



_. TICKET ISSUER NAME 



TICKET ISSUER ID 



TICKET ISSUER'S 
COMMUNICATION 10 



AVAILABLE SERVICE LIST 
ADDRESS 



INSTALL CARD LIST 
ADDRESS 



CUSTOMERS TABLE 
ADDRESS 



TICKET ISSUER 
INFORMATION ADDRESS 



I 



FIG. 52E 



52 04 PAYMENT CA RD ISSUERS UST 
5232 



5233 
5234 
5235 
5236 
5237 
5238 4 



.. PAYMENT CARD ISSUER ID 



PAYMENT CARD ISSUER 
NAME 



PAYMENT CARD ISSUER'S 
COMMUNICATION ID 



AVAILABLE SERVICE LIST 
ADDRESS 



INSTALL CARD UST 
ADDRFfiS 



CUSTOMERS TABLE 
ADDRESS 



PAYMENT CARD ISSUER 
INFORMATION ADDRESS 



J t 



J 



275 



EP 0 950 968 A1 



FIG. 52F 

5205TELEPHONE CARD ISSUERS LIST 



5239- 

5240- 

5241 

5242 

5243 

5244 

5245 



TELEPHONE CARD ISSUER 
NAME 



TELEPHONE CARD ISSUER 
ID 



TELEPHONE CARD ISSUER'S 
COMMUNICATION ID _ 



AVAILABLE SERVICE UST 
ADDRESS 



INSTALL CARD LIST 
ADDRESS 



CUSTOMERS TABLE 
ADDRESS 



TELEPHONE CARD ISSUER 
INFORMATION ADDRESS 



T 



FIG. 52G 



5206 PROVIDED SERVICE LIST 



5246- 
5247- 
5248- 



SERVICE PROVIDING 
NUMBER 



SERVICE CODE 



SERVICE PROVIDING TIME 



PROVIDED SERVICE 
creAQl INFORMATION ADDRESS 



J 



276 



EP 0 950 968 A1 



CD 
<M 
CO 





o 




CM 


CO 


CO 


CO 


CO 


CO 


in 


LO 


m 



CM 
CO 
CO 
LO 



CO g 
LO ^ 

CD 
Li. 




o o 

CO CO 

m in 



CD 
O 
CO 

in 



o 

CO 

in 



1 

00 

o 

CO 

in 



o 


o 




CM 


o 








CO 


CO 


CO 


CO 


m 


in 


in 


m 



CO 
CO 

in 



CO 

in 



in 

co 
in 



CO 
CO 

in 



277 



EP 0 950 968 A1 




278 



EP0 950 968 A1 



^ IO (D 

CM CM CM 

LO LO LO 

LO IO LO 



cm 

LO 
LO 



00 
CM 
LO 
LO 



OC 
Q 



3 

cr 
CO u 
CM JS 

LO S 

to P 







|31V0ldl 


5KLIST 


N0I1V 






rr 






USER ID 


R*S PUBLIC 


EOCAROCEf 
ADDRESS 


E MICRO CH 
ADDRESS 


USERINFOR 
ADDRESS 




I use 


REGISTERS 


TELEPHON 


FORMER 




ELECTRONIC TELEPHONE CARD 
MANAGEMENT INFORMATION 
















CARD NAME 


[ CARD CODE 


TELEPH0NE CARD ISSUER 
in 


TERM OF VALIDITY 


CARD PRIVATE KEY 


CARD PUBLIC KEY 


ACC0UNTING EQUIPMENT 
PRIVATE KEY 


ACCOUNTING EQUIPMENT 
PUBLIC KEY 


TEMPLATE CODE 


TERM OF MANAGEMENT 


COMMUNICATION SERVICE Ii 
PROVIDER LIST ADDRESS '1 


REGISTERED CARD J 
LIST ADDRESS 1 


5500! 


5503- 


5504- 


5505- 


5506- 


5507- 


5508- 


5509-J 


5510 J 


5511 -J 


5512-1 


55134 


5514-1 



279 



EP 0 950 968 A1 



CD 
CO 

to 
© 



cc 
Hco 

£oO 

IS 



cc 

Ul 

CO 

z> 

CO 

O 



CM 
CO 

m 

CO 
LU 
ID 

s 

cc 

UJ 

o 

Cc 

I 



CO 

CO 
.LO 

LU 

CO 

O 

CL 
CO 
Ul 
CC 
LU 

o 



S 



/ o 

CO 



I 



m 

' CD 

in 



3 

LU 

s 

a. 



to 

CO 
LO 

o 



a. 

X 
LU 
>- 

ac 

§ 



< 
CO 
LO 

o 

LL. 




UJ 
—J 

CD 

O 



280 



EP 0 950 968 A1 



coO 
UJ 



Q CO ; 

CO 
lO 

£2 ^ 



cr 

QC 
LU 

CO 

^> 

LU 

-J 

g 











6099 


O 

'J 

CO 




5612 




O 






cr 


a. 






FERE 


E RES 


DATA 


DATA 




s 


AD 


s 


a. 




o 




TAU 


AUF 


UPL 


UPD 




I 






■ — : 









CM 

T— 

CO 

AO 



a, 

R 

Q 



o 

CO 
LO 

CD 

LL 




CO 
O 



281 



EP 0 950 968 A1 



CD 

in 
CD 



I 

CO 

HIS 

CO& 



iili 

^» u- Z == S 
CDS <CLU <C 



CM 

LO 

CO 

Q 



3 



CO 

CO 



CO 
Ul 

DC 



Ul 



e 



2 



to 



o 



2 

o. 



LO 

o 

i 

X 

lii 

>- 



< 

LO 

CD 




282 



EP 0 950 968 A1 



CO 
C/3 



Q 

in 

(3 
ll 



ye 

UlS 

acuj 



CO 



LU 



in 

LU 

o 

LU 

a: 



2 



I 



to 



to 



CM 

to 



i 

co 



2 

a. 



2 



I 

UJ 

I 



o 

i 

X 
LU 

>- 
CO 

O 



CVJ 

T— 

to 



o 

S 



o 

LO 

d 




<UJ . 



UjOOhO 



283 



EP 0 950 968 A1 



0 

CO 

o 



00 
ID 

O 

LL 




284 



EP 0 950 968 A1 



FIG. 59 



USER 



MOBILE USER 
TERMINAL 



SERVICE PROVIDING 
SYSTEM 



TICKET ISSUING 
SYSTEM 



TICKET 
PURCHASE 
APPLICATION 



5900 



ELECTRONIC 
TICKET DISPLAY 



5910 



TiCKET \ 
PURCHASE 5901 
ORDER U2SP 



ELECTRONIC \ 
TICKET 5908 
ISSUING 



RECEIPT SP2U \ 
5909 



TRANSACTION 
PROCESSING 
SYSTEM 



s. 



TICKET 
PURCHASE 5902 
ORDER SP2TI 



ELECTRONIC 
TICKET ISSUING 5903 
COMMISSION 



CLEARING REQUEST _,\ . 

5904 

4- 



CLEARING COMPLETION TP2SP 

5905 



CLEARING \ 
COMPLETION 5906 
SP2TI 



RECEIPT TI2SP \ 
5907 



285 



EP 0 950 968 A1 



FIG. 60 



USER 



MOBILE USER 
TERMINAL 



SERVICE 
PROVIDING 
SYSTEM 



TICKET ISSUING 
SYSTEM 



TRANSACTION 
PROCESSING 
SYSTEM 



ICKET PURCHASE 
APPLICATION 



6000! 



TICKET 
PURCHASE 
ORDER U2SP 



6001 



[TICKET PURCHASE \ 
ORDER SP2TI 6002 



ELECTRONIC 
TICKET DISPLAY 



[ELECTRONIC cq^i 
TICKET ISSUING 

[TEMPORARY fi0 >) 5 | 
RECEIPT bUU;>, 



[ELECTRONIC c^ 0 o 
TICKET bUUd 
ISSUING COMMISSION 



6006 1 



CLEARING REQUEST 5307 



CLEARING COMPLETION TP2SP 50O8 



ICLEARING 6009 
COMPLETION SP2T1 



pEcipmsPgoYo 



6011 



RECEIPT 

,SP2U 

DATA UPDATING 
I (DATA UPDATING 

PROCESS) 



286 



EP 0 950 968 A1 



FIG. 61 



USER 



MOBILE USER 
TERMINAL 



PAYMENT CARD 

PURCHASE 

APPLICATION 



61001 



ELECTRONIC 
PAYMENT 
CARD DISPLAY 



SERVICE 
PROVIDING 
SYSTEM 



PAYMENT CARD 
ISSUING 
SYSTEM 



PAYMENT CARD n 
PURCHASE 6101 
ORDER U2SP 



6110 



JLECTRONIC c ^ no 
'AYMENT CARD 6108 

SSUING 



RECEIPT SP2U 61 ^ 9 



TRANSACTION 
PROCESSING 
SYSTEM 



PAYMENT CARD fil OP 
PURCHASE ™ d 
ORDER SP2PCI 



ELECTRONIC „} M 
3 AYMENTCARD 6103 
SSUING COMMISSION 



CLEARING REQUEST 

J 6104 



CLEARING COMPLETION TP2SP 

6105 



CLEARING 
COMPLETION 6106 
SP2PCI 



RECEIPT 7^, 
PCI2SP 6107 



287 



EP 0 950 968 A1 



FIG. 62 



USER 



MOBILE USER 
TERMINAL 



SERVICE PROVIDING 
SYSTEM 



PAYMENT CARD 
ISSUING SYSTEM 



TRANSACTION 
PROCESSING 
SYSTEM 



PAYMENT CARD 

PURCHASE 

APPLICATION 



6200 



ELECTRONIC 
PAYMENT 
CARD DISPLAY 



6206 



PAYMENT CARD ,A, 
PURCHASE 6201 
ORDER U2SP 



ELECTRONIC 
PAYMENT 6204 
CARD ISSUING 



TEMPORARY eo \ c 
RECEIPT 6205 



PAYMENT CARD ,> 
PURCHASE 6202 
ORDER SP2PCI 



ELECTRONIC ^ „ 
PAYMENT 6203 
CARD ISSUING 
COMMISSION 



CLEARING REQUEST 



6207 



CLEARING COMPLETION TP2SP 6208 



CLEARING e Q \ Q 
COMPLETION O^U y 
SP2PCI 



V 



RECEIPT PCI2SPg2^ 0 



RECEIPT SP2U g21 
DATA UPDATING 
(DATA UPDATING 
PROCESS) 



288 



EP 0 950 968 A1 



FIG. 63 



USER 



MOBILE USER 
TERMINAL 



SERVICE PROVIDING 
SYSTEM 



TELEPHONE CARD 
ISSUING SYSTEM 



PAYMENT CARD 

PURCHASE 

APPLICATION 



6300 



ELECTRONIC 
PAYMENT 
CARD DISPLAY 



6310 



TELEPHONE CARD n 
PURCHASE 630 
ORDER U2SP 



ELECTRONIC \ „ 
TELEPHONE 6308 
CARD ISSUING 



RECEIPT SP2U 6 £ og 



TRANSACTION 
PROCESSING 
SYSTEM 



TELEPHONE CARD 
PURCHASE 6302 
ORDER SP2TCI 



ELECTRONIC 6303I 
TELEPHONE CARD 
ISSUING COMMISSION 



CLEARING REQUEST 



6304 



CLEARING COMPLETION TP2SP qqq$ 



CLEARING \ 
COMPLETION 6306 
SP2TCI 



RECEIPT TCI2SPg£ 07 



289 



EP 0 950 968 A1 



FIG. 64 



USER 



MOBILE USER 
TERMINAL 



SERVICE 
PROVIDING 
SYSTEM 



TELEPHONE CARD 
ISSUING SYSTEM 



TRANSACTION 
PROCESSING 
SYSTEM 



PAYMENT CARD 

PURCHASE 

APPLICATION 



6400 



TELEPHONE CARD \ 
PURCHASE 6401 
ORDER U2SP 



ELECTRONIC 
PAYMENT CARD 
DISPLAY 



6406 



TELEPHONE CARD\ 
PURCHASE 6402 
ORDER SP2TCI 



ELECTRONIC £ AnA 
TELEPHONE 6404 
CARD ISSUING 



TEMPORARY 
RECEIPT 6405 



ELECTRONIC ~Y„ 
TELEPHONE CARD 6403 
ISSUING 
COMMISSION 



CLEARING REQUEST 6 ^ Q7 



CLEARING COMPLETION TP2SP 6 4q 8 



CLEARING _} na 
COMPLETION 6409 
SP2TCI 



RECEIPT TCI2SP 



6410 



RECEIPT SP2U ^, 
DATA UPDATING 641 
(DATA UPDATING 
PROCESS) 



290 



EP 0 950 968 A1 



FIG. 65A 



USER 



MOBILE USER 
TERMINAL 



SERVICE PROVIDING 



REGISTERING USAGE OF 
ELECTRONIC TICKET 




6500 

DISPLAYING ELECTRONIC TICKET 
REGISTERED FOR USAGE 


TICKET REGISTRATION \ * 
REQUEST 6501 


TICKET CERTIFICATE c ^ 
ISSUING 6 502 


6503 



291 



EP 0 950 968 A1 



FIG. 65B 



USER 



MOBILE USER 
TERMINAL 



SERVICE PROVIDING 
SYSTEM 



REGISTERING USAGE OF 
ELECTRONIC PAYMENT CARD 



6504 



DISPLAYING ELECTRONIC 
PAYMENT CARD REGISTERED 
FOR USAGE 



6507 



PAYMENT CARD 

REGISTRATION 

REQUEST 



6505 



PAYMENT CARD 

CERTIFICATE 

ISSUING 



6506 



292 



EP 0 950 968 A1 



FIG. 65C 



USER 



MOBILE USER 
TERMINAL 



REGISTERING USAGE OF 
ELECTRONIC 
TELEPHONE CARD 



6508 



DISPLAYING ELECTRONIC 
TELEPHONE CARD 
REGISTERED FOR USAGE 



6511 



SERVICE 
PROVIDING 
SYSTEM 



TELEPHONE CARD \ 
REGISTRATION 6509 
REQUEST 



TELEPHONE CARD 

CERTIFICATE 

ISSUING 



\ 



6510 



293 



EP 0 950 968 A1 



FIG. 66 



OPERATOR 



GATE TERMINAL 



SERVICE 
PROVIDING 
SYSTEM 



TICKET SETUP 
OPERATION 




6600 


_ , — . » 




SETUP EXAMINING 
TICKET REQUEST b&u1 


SETUP COMPLETION 
DISPLAY 


SETUP EXAMINING 6602 
TICKET 


« - s. 

6603 





294 



EP 0 950 968 A1 



CO 

CD 

LL 



si. 

<f UJ 
LU 

a 
o 



5 
a: 

< 
a 



< 

XUJ 

ujit 



CO 



o 

CD 



LU-J 
D2 

=doc 

00 Ui 
OH 



CL 

LUO 
HO 



a: 

CO 
3 



CD 



o 



' LLI 

Woo 
ho. 



CM 
CD 



2 
O 



h-iu 



CO 

o 

CD 



gtli 

9xui 
h-lugc 



CD 



8£ 
S3 

LUO 



UJ 

o 
z: 
< 
oc 



LU 



UJ 
CL 



o 
o 

CD 



UJ 

o 



o 

li 

UiO 



CD 
O 

CO 



295 



EP 0 950 968 A1 



cc 

UJ 



GC 
UJ 



o 

§^ 

CO w 



IX. 

£E 

□CCO 

wo 

CO 

£8ui 
ccs 

OQ. 



O 
, CO 
/ CO 



zee 



S2< 

OQ. 



CM 
O 

/ CD 



CO 
O 
, CO 
/ CO 



o , y 
, co I/ 

/ CO 



CO 
CO 



CD 

Ig 

—J o 
op 

>-UJ 

Q- S 
QO 



o 



e 

CC 
Ui 

% 



CD 
O 



UJ UJ 

II 

Co 

CO 2: 

COO 
UJ ll 
QC — 
CL UJ 



2T 
UJ 

I 

a. 

*"T UJ 
COQ- 



s 

/CO 



1 



CO 

o 

/<o 



It 

%UJ 



o 

,00 

/CO 



IT 
O 

o 



/ 



00 
o 

s 



o 



o 

o 
o 

a. 



CO I 

1 



o 

/CO 

/co 



y 00 
/CO 



UJ 

a. 

o 



UJ 

I 



a. 

CO 
Q 



00 oc 

7X uj 
CD co 



CD 



296 



EP 0 950 968 A1 



FIG. 69 

USER 



MOBILE USER 
TERMINAL 



VENDING 
MACHINE 



START PURCHASE OPERATION 



DISPLAY WAIT FOR PRODUCT SELECTION 



6900 1 



6901 



PRODUCT SELECTION! 



6902 1 

T PIS PLAY WAI T FOR START 6f PAYMENT OPERATION 

\ 

6903 1 

START PAYMENT OPERATION 



DISPLAY WAIT FOR PAYMENT OPERATION 



6904 1 



PAYMENT OPERATION 



DISPLAY RECEIPT 



6911 



\ I 
6905 

i 


PAYMENT OFFER 

* __ 


6907 


PAYMENT OFFER 
RESPONSE 


\ 1 
6908 


MICRO CHECK 


6909 


RECEIPT 


\ I 
6910 


PRODUCT 





691 2 1 



297 



EP 0 950 968 A1 



FIG. 70 

USER 



MOBILE USER 
TERMINAL 



ACCOUNTING 
EQUIPMENT 
(EXCHANGE) 



TELEPHONE 
TERMINAL 



RECEIVER 



DISPLAY ELECTRONIC 
TELEPHONE CARD, 
AND CALL 



% . MICRO CHECK 
70Q0 | CALL REQUEST 



micro check 
| call response 

[telephone 
micro check 



7001 
7002 



DISPLAY CALL IN 
PROCESS 



7003 



7004 



CALL RECEPTION 
REQUEST 



RECEIPT 



-r-r 

70091 



70051 



CALL RESPONSE 



RECEPTION DISPLAY 

70061 
fiPFFCH OPERATION 

70071 



70081 



DISPLAY CONNECTION! 
IN PROCESS 

7010 



CONNECTED 



lOMMUNICATION 
ICHARGE 



7011 



^TELEPHONE MICRO 
(CHECK 



7012 



RECEIPT 



7013 



| AC COUNTING DISPLA Y I 
70141 



COMMUNICATION 
CHARGE 



7015 



TELEPHONE 
MICRO CHECK 



7016 



RECEIPT 



7017 



| ACCOUNTING DISPLAY | 

T 

70181 



298 



EP 0 950 968 A1 



FIG. 71 



GATE TERMINAL 



SERVICE PROVIDING 
SYSTEM 



DATA UPDATE 




REQUEST 


5702 


DATA UPDATE 




RESPONSE 


5703 


UPLOAD DATA 




(EXAMINED TICKET 


5704 


INFORMATION) 
«— — 





UPDATE DATA ^ 
(REPORT TICKET 5705 
AUTHORIZATION) 



TICKET ISSUING 
SYSTEM 



USAGE REPORT 



7100 



299 



EP 0 950 968 A1 



FIG. 72 



MERCHANT TERMINAL, 
VENDING MACHINE 



SERVICE PROVIDING 
SYSTEM 



DATA UPDATE REQUEST 



5702 

DATA UPDATE RESPONSE 



\ 

5703 



UPLOAD DATA 



(USED MICRO- r _"l nA 
CHECK INFORMATION) 5704 

UPDATE DATA 



(REPORT MICRO- ____ 
CHECK AUTHORIZATION) 5705 



PAYMENT CARD 
ISSUING SYSTEM 



USAGE REPORT 



7200 



300 



EP 0 950 968 A1 



LU 



O 
DC 
< . 
OS 
UJ >- 

O O 

as 

lu 52 



a 
a 

si 

CL CO 
LU > 

> 
DC 
LU 
CO 



LU 

s 

5 w 

go 

LU 5 



CO 
UJ 

a 



2 

a. 
3 



CO 



3 
o 
o 
o 
< 



X 

o 

X 
UJ 



C\J 

o 
in 



UJ 

CO 

z 
o 

a. 

CO 
LU 

<r 

2 

Q. 

3 

a 



CO 

o 



o 
< 



3 



LO 

6 

o . 



y2 



UJ 



Q 

s 

a 
a. 

3 



co J 



m 
o 

to 




g 



301 



EP 0 950 968 A1 



FIG. 74 



USER A 



MOBILE USER 
TERMINAL (USER A) 



MOBILE USER 
TERMINAL (USER B) 



USERB 



SERVICE 
PROVIDING 
SYSTEM 



TICKET TRANSFER 
OPERATION . 



DISPLAY 
RANSFER 

Offer response 



7400 



7405 



DISPLAY 

TRANSFER 

COMPLETION 



7408 



TICKET TRANSFER \ 
OFFER 7401 



DISPLAY 
TRANSFER OFFER 



7402 
TRANSFER OFFER 
ACCEPTANCE 
OPERATION 



TICKET TRANSFER N 
OFFER RESPONSE 7404 



TICKET TRANSFER \ 
CERTIRCATE 740 6 



TICKET TRANSFER v 
RECEIPT 7407 



7403 



DISPLAY 

TRANSFER 

CERTIFICATE 



TRANSFER 
PROCESS 
REQUEST 
OPERATION 



7409 



7410 



TICKET TRANSFER REQUEST ) 

741 



TICKET TRANSFER 

DISPLAY 
ELECTRONIC 
TICKET 



7413 



7412 



302 



EP 0 950 968 A1 



FIG! 75 



MOBILE USER 
USER A TERMINAL (USER A) 

PAYMENT CAR 
TRANSFER 
OPERATION 



75001 



DISPLAY 
TRANSFER 
OFFER 
RESPONSE 



7505 



OISPLAY 

TRANSFER 

COMPLETION 



7508 



MOBILE USER 
TERMINAL (USER B) 



CARD TRANSFER 
OFFER 750 



CARD TRANSFER 
OFFER RESPONSE 



7504 



CARD TRANSFER - 7C ^ 45 
CERTIFICATE 7 506| 



CARO TRANSFER-^-. 
RECEIPT 7507} 



USERB 



DISPLAY 

TRANSFER 

OFFER 



75021 

TRANSFER 
OFFER 

ACCEPTANCE 
OPERATION 



75031 



DISPLAY 

TRANSFER 

CERTIFICATE 



75091 

TRANSFER 
PROCESS REQUEST! 
OPERATION 



SERVICE 
PROVIDING 
SYSTEM 



7510 
CARD TRANS 



FER REQUEST 



PAYMENT CARD TRANSFER 

DISPLAY 
ELECTRONIC 
PAYMENT CARD 



7513 



7511 



7512 



303 



EP 0 950 968 A1 



FIG. 76 



MOBILE USER 
USER A TERMINAL (USER A) 



TELEPHONE CARD 
TRANSFER 
O P ERATI ON 



MOBILE USER 
TERMINAL (USER B) USERB 



SERVICE 
PROVIDING 
SYSTEM 



7600 



DISPLAY 
TRANSFER 
OFFER 
RESPONSE 



7605 



DISPLAY - 

TRANSFER 

COMPLETION 



7608 



Ol 



^TRANSFER 7601 



TRANSFER 
OFFER DISPLAY, 



8' ARD TRANSFER ,-^4 
FFER RESPONSE 7604 



TRANSFER 
OFFER 7603 
ACCEPTANCE 
OPERATION 



CARD TRANSFER 
CERTIFICATE 76061 



CARD TRANSFER \ 
RECEIPT 7607 



7602 



DISPLAY 

TRANSFER 

CERTIFICATE 



7609 



TRANSFER 
PROCESS 7610 
REQUEST 
OPERATION 



CARD TRANSFER REQUEST 



761 



TELEPHONE CARD TRANSFER 7g12 



DISPLAY 7613 
ELECTRONIC 
TELEPHONE 
CARD 



304 



EP 0 950 968 A1 



CD 



d 

LL 




305 



EP 0 950 968 A1 




306 



EP 0 950 968 A1 



CD 

LL 




307 



EP 0 950 968 A1 



FIG. 80 



GATE TERMINAL 



SERVICE PROVIDING 
SYSTEM 



UPDATE DATA 



TICKET ISSUING 
SYSTEM 



4 


DATA UPDATE 
INSTRUCTION 


5706 




UPLOAD DATA 


s"* 

5707 



5708 

(EXAMINATION PROGRAM FOR 
ELECTRONIC TICKET) 



MODIFICATION REQUEST 



8000! 



308 



EP 0 950 968 A1 



CO 

a 

LL 



cotu 
o 



CO 

a 
> 

Ui 

CO 



o 
o 

GO 



CO 
LU 

ZD 

S 

cc 



6 

u. 

Q 
O 



cc 

UI 

CO 



CO 

o 



00 



Ui 

o 



5 

o 
o 



5 

si 
P 

-J LL. 

cl c: 
£25 



5. 

CO 



CVI 
00 



§ 

LU 

co 2 
20 



;2 



o 

<C LU 

uj a. 
ceo 



00 



o 

i 

oc 

LU 
_J 
UJ 

CO 



to 

/ o 



g 

LL 
O 

O 



oo 



CO 

5 



CO 



o 
»— 

CL. 
CO 

o 



309 



EP 0 950 968 A1 



FIG. 82 



USER 



MOBILE USER 
TERMINAL 



SERVICE 
PROVIDING 
SYSTEM 



TICKET ISSUING 
SYSTEM 



TRANSACTION 
PROCESSING 
SYSTEM 



DISPLAY 

MODIFICATION 

NOTIFICATON 



iim 8202 
PERATION 



8203 



8212] 



MODIFICATION 
NOTICE 



8201 



SELECT 
REACTION 



8204 



REFUND \ 
RECEIPT SP2U 821 



MODIFICATION QO « rt 
REQUEST 8200 



REFUND 
REQUEST 



8205 



REFUND 
COMMISSION 



8206 



REFUND CLEARING REQUEST 82 07 



REFUND CLEARING COMPLETION qXqq 
TP2SP 




8209 



REFUND 
RECEIPT 
TI2SP 



8210 



310 



EP 0 950 968 A1 



FIG. 83 



USER 



MOBILE USER 
TERMINAL 



SERVICE PROVIDING 
SYSTEM 



TICKET ISSUING 
SYSTEM 



TRANSACTION 
PROCESSING 
SYSTEM 



DISPLAY 

MODIFICATION 

NOTIFICATION 



MODIFICATION 
NOTICE 



8301 



REACTION 8$02 
SELECTION OPERATION 



8303I 



SELECT REACTION 



8304 



DISPLAY TEMPORARY 
RECEIPT 



TEMPORARY 
REFUND 



8307 



MODIFICATION 
t REQUEST 

8300 



REFUND REQUEST 



8305 
REFUND COMMISSION 



8306 



8308 RECEIPT 



REFUND CLEARING REQUEST 



REFUND CLEARING 
COMPLETION TP2SP 



REFUND n 
CLEARING 8311 
COMPLETION SP2TI 



REFUND N 
RECEIPT TI2SP 831 2 



8309 



8310 



REFUND 

RECEIPT SP2U Bdl 3 
I DATA UPDATING 
(DATA UPDATING PROCESS) 



311 



EP 0 950 968 A1 



FIG. 84 



USER 



8404 



DISPLAY PAYMENT 
OPERATION 
IN PROCESS 



MOBILE USER 
TERMINAL 
I 



MERCHANT 
TERMINAL (102,103) 
I 



MERCHANT 



SERVICE 
PROVIDING 
SYSTEM 



TRANSACTION 
PROCESSOR 



INSTRUCT PAYMENT USING EL ECTRONip CREDIT CARD ^ 

■ — — — | — — ■ ■ — 



8400 

DEPRESS CREDIT CARD 
SETTLEMENT SWITCH 



8401 

INSTRUCTSTARTOF 
PAYMEHT OPERATION 



INSTRUCT START OF PAYMENT OPERATION 



PAYMENT 
OPERATION 



8408 



DISPLAY RECEIPT 
M — ■ 



8422 



PAYMENT OFFER 



PAYMENT OFFEI 
RESPONSE 



05 



8406 



8402 
84031 



DISPLAY 
AUTHORIZATION 
IN PROCESS 



8407| 

AUTHORIZATION REQUEST 



PAYMENT 
REQUEST 



AUTH ORIZATION RESPONSE 
DISPLAY 



8409 



AUTHORIZATION REPORT 



8412 

SETTLEMENT PROCESS 
jtEOUEST OPERATION 



DISPLAY 8413 
SETTLEMENT 
IN PROCESS 



8410 



8411 



CLEARING REQU 

I 

CLEARING COM 


ESTM2SP 34 15 
PLETION TP2SP 


« , 

RECEIF 


tvosp 8418 r 



DISPLAY CLEANING 
COMPLETION 



8420 



RECEIPT SP2U 



8419 



8421 



CLEARING REQUEST 



CLEARING 

COMPLETION 

TP2SP 



8416 

T 

8417 



312 



EP 0 950 968 A1 





313 



EP 0 950 968 A1 



i— CM COTf 



in cd tr 




o 
o 

CO 
CO 



o 

CO 
GO 



CM 
O 
CO 
GO 



CO 
O 
CO 
QO 



LO CO 
O O Q 
CO CO CO 
CO CO CO 



co 
o o 

CO CO 
GO CO 



o 
o 

in 



co 

LU 

:=> • 
o 



CO 
CO 
LU 

o 

LU 

§ 

LU 

<r 




314 



EP 0 950 968 A1 



o 

oo 

d 



Q 



oo 



oo 



s 

Q 

5 



3 

1 



1^ 
OO 



CO 

oo 



OQ 



o 
<c 
a. 

s 



o o t- 

z- CMCVi 
oo oo oo 



CVJ CO 
CO CO 



w. 



\ <n : 



: : : :-: : ; : : : o;:!:;>: : 




^ t- 

o o <t- 

CO CO CO 
LO tO LO 



o § S 2 

tr ^ 

CO OO CO CO CO CO 



CO 



OQ 
CO 

CD 

LL 



< 

CO 

CD 

LL 




315 



EP 0 950 968 A1 



° n £2 
T*- 

r^. r» 

OO OO OO GO 



5 

I s - 
oo 



to 
oo 



CO I s - 

00 oo 



CD 

o 

CO 

to 




CO io <g 

CO CO CO CO 

h- r-- I s - 

oo oo oo oo 



oo 



gg 

oo oo 



moo cm 
cococo 




oo 



to 

CO 



CO 
CM 

OO 



CM 

I s - 
oo 



oo oo 

CM CM CO 

I s - r*- I s - 

oo oo oo 



I 

LU 

ic 

o 

cu 



< 

<: 

<• 
<; 

<: : 
<: 
<: 
<:: 
<: 
< : : 
< : : 

<; 

<: 
<: 
<: 
<: 



Q 
Ui 



o 



CD 



Qu 



:0: 



Q- 



: CO; 

go: 

.Ui 



O: 



§ 

UJ 
CO 



o 

Ui 

r> 

CO 
CO 



^vw^tfvv v w>tf& w'tf s? v vv* v 




LOOOCM 

cococo 



316 



EP 0 950 968 A1 




oo o> o 

O O -r- -r— 

£2 25 59 00 

<x> CO CO co 



CM CO 



GO 
CO 



^ to 



COO 



co co r^-r^- 

co CO tOLO 




317 



EP 0 950 968 A1 



3 

CO 
CO 



CO tO CD 

t s J 

co oo go eg 

OO CO GO CO 



CO 
CO 



CO 

co oo 

CO co to 



CO O 




co 

CM OJ 

CO CO 

GO GO 



oo co o nSi 

CM CM CO COCO 

OO OO OO CO GO 

CO OO OO CO CO 



CO 

CO CO 

OO CO 

CO CO 



LOCO CM 

r—i — r-^ 

lOLOLO 




318 



EP 0 950 968 A1 





319 



EP 0 950 968 A1 




CD 
O 
O 

CD 



< 

o 
o 

O 

LL 



t- CM CO 

o o o 
o) 55 o> 





o 


o 


8 



CO 
O 

o 



GO 0)0 

CD O t- 

o o o 

CD O) o> 



CM CO 



CO 

o 

s 




320 



EP 0 950 968 A1 



FIG.91A 



FIG.91B 



TICKET PURCHASE ORDER U2SP 



onto l; : ) 



TICKET PURCHASE ORDER 
U2SP HEADER 



SERVICE CODE 



TICKET SALES OFFER 



OFFER NUMBER 



PAYMENT SERVICE CODE 



AMOUNT OF PAYMENT A 



PAYMENT OPTION CODE 



REQUEST NUMBER 



TERMOFVALIDnT A 



USER ID 



ISSUED TIME 



9102 



3 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRE T KEY B 



SECRET KEY E 



ENCRYPTED WITH SERVICE PROVIDERS 
PUBLIC KEY (PUBLIC KEY SP1 



TICKET PURCHASE ORDER SP2TI 



9113 
9114 




i 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY F) 



> / j s / s * s S J >SJ > * , > > , 
SECRET KEY F 



ENCRYPTED WITH TICKET ISSUER'S 
PUBLIC KEY (PUBLIC KEY TP 



321 



EP 0 950 968 A1 



FIG.92A 



FIG.92B 



ELECTRONIC TICKET ISSUING COMMISSION 



ELECTRONIC TICKET ISSUING 



rvv/yvyyyyyyy yyyyy 



ELECTRONIC TICKET ISSUING J 
COMMISSION HEADER 



1 




IYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY G) 



2 



SECRET KEY G 



7 



ENCwfrTED WITH SERVICE PROVIDERS 



PI IBI m KEY (PUBLIC KEY SR 



9214 
9215 



5903 
6003 



j^yyyyyyyyyyyyyyyy 




ENCRYPTED WITH A GENERATE*) 
SECRET KEY (SECR ET KEY H) 



VA SECRET KEY H 



ENCRYPTED WITH USER'S 
PUBLIC KEY (PUBLIC KEY V) 



■ 9229 
-9230 

5908 
6004 



322 



EP 0 950 968 A1 



FIG.93A 



FIG.93B 



TEMPORARY RECEIPT 



CLEARING REQUEST 




9326 
9327 



5904 
6007 



323 



EP 0 950 968 A1 



FIG.94A 



FIG.94B 



CLEARING COMPLETION TP2SP 



CLEARING COMPLETION SP2TI 




ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP ) 



5905 
6008 



324 



EP 0 950 968 A1 



FIG.95A 

RECEIPT TI2SP 



FIG.95B 

RECEIPT SP2U 



RECEIPT TI2SP HEADER 



CUSTOMER NUMBER 



TICKET ISSUING INFORMATION 



PAYMENT SERVICE CODE 



AMOUNT OF PAYMENT 



PAYMENT OPTION CODE 



REQUEST NUMBER 



TRANSACTION NUMBER -3 



CLEARING NUMBER -i 



TRANSACTION PROCESSOR ID 



TICKET ISSUER ID -3 



ISSUED TIME 



■9500 

9501 
9502 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SEC RET KEY M ) 



SECRET KEY M 



ENCRYPTED WITH SERVICE PROVIDERS 
PUBLIC KEY (PUBLIC KEY SP \ 



9503 

9504 

9505 

9506 

9507 

■9508 
•9509 

9510 

9511 

9512 
9513 



-^+9514 



9515 



5907 
6010 




9522 

9523 
9524 



9525 
9526 



5909 
6011 



325 



EP 0 950 968 A1 



FIG.96A 



FIG.96B 



PAYMENT CARD PURCHASE ORDER U2SP 



PAYMENT CARD PURCHASE ORDER SP2PCI 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY A) 



2 



SECRET KEY A 



ENCRYPTED WITH SERVICE PROVIDERS 
PUBLIC KEY (PUBLIC KEY SP) 



2 



9613 
9614 

■ 6101 
6201 




ENCRYPTED WITH A GENERATED 
SECRET KE Y (SECRET KEY B) 



1 



SECRET KEY B 



ENCRYPTED WITH PAYMENT CARD 
ISSUER'S PUBLIC KEY (PUBLIC KEY PCI 



326 



EP 0 950 968 A1 



RG.97A 

ELECTRONIC PAYMENT CARD 
ISSUING COMMISSION 



ENCRYPTED WITH A GENERATE 

SECRET KEY (SECRET KEY C) 

'2 j s / / > j >'~ > > t j / > j ) 



SECRET KEY C ™ 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP) 




9711 

9712 
9713 



9714 
9715 

6103 
6203 



FIG.97B 

ELECTRONIC PAYMENT CARD ISSUING 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY Dl 



SECRET KEY D 



ENCRYPTED WITH USER'S 
PUBLIC KEY (PUBLIC KEY U \ 



9724 
9725 

9726 

9727 
9728 



9729 
9730 

6108 
6204 



327 



EP 0 950 968 A1 



FIG.98A 



FIG.98B 



TEMPORARY RECEIPT 



TEMPORARY RECEIPT HEADER 



USER ID 



PAYMENT CARD 
ISSUING INFORMATION 



PAYMENT SERVICE CODE 



AMOUNT OF PAYMENT 



PAYMENT OPTION CODE 



REQUEST NUMBER 



TRANSACTION NUMBER 



SERVICE PROVIDER ID 



ISSUED TIME 



S88888888888^ 



Hssiii 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY E) 



$ SECRET KEY I 



ENCRYPTED WITH USER'S 
PUBLIC KEY (PUBUC KEY U) 



-9800 
■ 9801 

-9802 

-9803 
-9804 
-9805 
-9806 
-9807 
-9808 

-9809 

-9810 
-9811 



9812 
9813 



6205 



CLEARING REQUEST 



< 



CLEARING REQUEST HEADER 



USER CLEARING ACCOUNT- 



PAYMENT CARD ISSUER 
CLEARING ACCOUNT 



AMOUNT OF PAYMENT 



PAYMENT OPTION CODE 



REQUEST NUMBER 



TRANSACTION NUMBER 



TERM OF VALIDITY 



SERVICE PROVIDER ID 



ISSUED TIME 



ENCRYPTED WITH A GENERATED 
SECRET KEYjSECRET KEY F \ 



i 



SECRET KEY F 



2 



ENCRYPTED WITH TRANSACTION 
PROCESSOR'S PUBLIC KEY (PUBUC KEY TP 



328 



EP 0 950 968 A1 



FIG.99A 



FIG.99B 



CLEARING COMPLETION TP2SP 



CLEARING COMPLETION TP2SP 
HEADER 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY G ) 



2 



SECRET KEY G 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP ) 



CLEARING COMPLETION SP2PCI 



9915 
9916 

6105 
6208 



IAAAX A A A A X A Si « p-*y^r^ 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET K EY H) 



$ SECRET KEY H -&4 



ENCRYPTED WITH PAYMENT CARD 
SSUER'S PUBUC KEY (PUBUC KEY PCI ) 



9930 
9931 



9932 
9933 

6106 
6209 



329 



EP 0 950 968 A1 



FIG.100A 



FIG.100B 



RECEIPT PCI2SP 



RECEIPT SP2U 



RECEIPT PCI2SP HEADER 



CUSTOMER NUMBER 



PAYMENT CARD 
ISSUING INFORMATION [pgl 



PAYMENT SERVICE CODE 



AMOUNT OF PAYMENT 



PAYMENT OPTION CODE 



REQUEST NUMBER 



TRANSACTION NUMBER 



CLEARING NUMBER 



TRANSACTION PROCESSOR ID 




ENCRYPTED WITH A GENERATED 

S ECRET KEY (SECRET KEY I) 
> /V'j -> > j >*7-7-r 



SECRET KEY I -^--10014 



* / / / > j > > > / > / / 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBUC KEY SP) 



10000 
10001 

52100 

10003 
10004 
■10005 
10006 
10007 
10008 



10009 
10010 

10011 

10012 
10013 



10015 

6107 
6210 



,y x v v v v x x y v ,y v y. x. m 




ENCRYPTED WITH A GENERATED 
SECRE T KEY (SECRET KEY J) 

4 



SECRET KEY J 



s ; ; sy. 



ENCRYPTED WITH USER'S 
PUBUC KEY (PUBLIC KEY U ) 



6109 
6211 



330 



EP 0 950 968 A1 



FIG.101A 



FIG.101B 



TELEPHONE CARD PURCHASE ORDER U 2SP TELEPHONE CARD PURCHASE ORDER SP2TCI 




3f 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY A ) 



^ | SEC RET KEY A 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP) 



10113 
10114 

6301 
6401 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY B\ 



SECRET KEY B 



NCRYPTED WITH TELEPHONE CARD 
ISSUERS PUBLIC KEY (PUBLIC KEY TCI ) 



10128 
10129 

6302 
6402 



331 



EP 0 950 968 A1 



FIG.102A 

ELECTRONIC TELEPHONE CARD 
ISSUING COMMISSION 



FIG.102B 



ELECTRONIC TELEPHONE CARD ISSUING 



ELECTRONIC TELEPHONE CARD 
ISSUING COMMISSION HEADER 



TRANSACTION NUMBER 



AMOUNT OF SALE 



CLEARING OPTION 



REQUEST NUMBER 



CARD CODE 



TEMPLATE CODE 



NUMBER OF CARD 



CARD ID 



CARD INFORMATION 



TELEPHONE CARD 
ISSUER ID 



-TTCil=3 



REPRESENTATION COMPONENT 
(OPTIONAL) 



TELEPHONE CARD ISSUER ID 



ISSUED TIME 



TCI 



10200 

10201 

10202 

10203 

10204 

10205 

10206 

10207 

10216 
10217 

-10218 
■10219 



ENCRYPTED WITH A GENERATED 
SECRET KEY jSECRET KEY 0\ 



SECRET KEY C 



1 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP) 



10208 
10209 

10210 

• 10211 

-10212 
-10213 



10214 
10215 

6303 
6403 



3XE 



ELECTRONIC TELEPHONE CARD] 
ISSUING HEADER 



TRANSACTION NUMBER 



REQUEST NUMBER 



NUMBER OF CARD 



TELEPHONE CARD 
PROGRAM 



PRESENTING CARD 



CARD CERTIFICATE 



SERVICE PROVIDER ID 



ISSUED TIME 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY D) 



i 



Z7 



SECRET KEY D 



ENCRYPTED WITH USER'S 
PUBLIC KEY (PUBLIC KEY U) 



10220 
10221 
10222 
10223 



10231 



10224 
10225 

10226 

10227 
10228 



10229 
10230 



6308 
6404 



332 



EP 0 950 968 A1 



FIG.103A 



FIG.103B 



TEMPORARY RECEIPT 



CLEARING REQUEST 




333 



EP 0 950 968 A1 



FIG.104A 



FIG.104B 



CLEARING COMPLETION TP2SP 



CLEARING COMPLETION 
TP2SP HEADER 



CLEARING NUMBER -§ 



USER CLEARING ACCOUNT - ? 



TELEPHONE CARD ISSUER 
CLEARING ACCOUNT 



AMOUNT OF PAYMENT 



PAYMENT OPTION CODE 



REQUEST NUMBER 



TRANSACTION NUMBER 



CLEARING INFORMATION 2SP 

TP 



CLEARING INFORMATION 2TCI 

TP 



CLEARING INFORMATION 2U 



CLEARING PROCESSOR ID - \* - - 1 041 1 

11+10412 

10413 
10414 





10400 

10401 

10402 

■10403 

-10404 

-10405 

-10406 

-10407 
-10408 



10409 



10410 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY G) 



t SECRET KEY G 



r ? y / s j / j / ) s > > / J J J s J- 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBUCKEY(PUBUCKEYSP) 



10415 
10416 



6305 
6408 



CLEARING COMPLETION SP2TCI 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY H) 



y y > > > > ' 1 } f ' ' ' ' ' > j / y 



SECRET KEYH 



ENCRYPTED WITH TELEPHONE CARD 
ISSUER'S PUBLIC KEY (PUBLIC KEY TCI 



334 



EP 0 950 968 A1 



FIG.105A 



FIG.105B 



RECEIPT TCI2SP 



RECEIPT SP2U 



MM x.xxy* h. K x v * h v Ksas 



NCRYPTEO WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP ) 




6307 
6410 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY J ) 



SECRET KEY J 



5 



ENCRYPTED WITH USER'S 
PUBLIC KEY (PUBLIC KEY U ) 



335 



EP0 950 968 A1 



oo 
o 

CO 

o 



cn 
o 

CO 

o 



o 



CO 

o 





CM 


CO 




in 


-1061 


CO 

o 


CO 

o 


CO 

o 


CO 

o 





336 



EP 0 950 968 A1 




o t- 

o o 



CM 


CO 


to 


CD 


O 


<=><=> 


h- 






O 


O 


CD CD 









co 

o o 
o o 



o 




337 



EP 0 950 968 A1 



CO 

o 

CO 

o 



© 

CO 

o 



s 



CM CO*** 
CO coco 

o oo 



in co 




u- 

cc uj 
;r LU 

o Z 

LU 

^ CO 

O £2 



<S> UJ 

§1 

O 



o 

cc 

LU 



CO UJ 



cc 

LU 

Q 
> 

o 
cc 
o. 

LU 

o 

LU 
CO 



LU 



CO 
CO 




338 



EP 0 950 968 A1 



FIG.109A FIG.109B 



SETUP EXAMINING TICKET REQUEST 



SETUP EXAMINING TICKET 
REQUEST HEADER 



TICKET CODE 



GATE ID 



MERCHANT ID 



ISSUED TIME 




I 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY A) 



W / / J > / / y J J J J j > s^r? -? 



SECRET KEY A 



Zzzzz 



777- 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP) | 



■10900 

10901 

10902 

10903 

10904 
10905 
10906 

10907 
10908 

6601 



SETUP EXAMINING TICKET 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY B) 



10909 
10910 
10911 
10912 
10913 
10914 
10915 



-10916 



-10917 



10918 

10919 
10920 



^ SECRET KEY B 



/*/ s > ;j j j j j j > * > > , > >. 



ENCRYPTED WITH PUBLIC 
KEY OF GATE (PUBUC KEY G) 



10921 
10922 

-6602 



339 



EP 0 950 968 A1 



FIG. 11 OA 



FIG.110B 



TICKET PRESENTATION 




11010 
11011 



TICKET EXAMINATION 



TICKET EXAMINATION HEADER 



TRANSACTION NUMBER 



(OPTIONAL) 
MESSAGE RESPONSE 



REQUEST NUMBER 



TICKET 10 



INSTRUCTION CODE 



GATE TEST PATTERN 



TICKET TEST PATTERN 

} , , > , S J J J J J J S > > > *4 



ENCRYPTED WITH PUBLIC KEY 
OF TICKET (PUBLIC KEY T) 



GATE ID 



MERCHANT ID 



ISSUED TIME 



340 



EP 0 950 968 A1 




341 



EP 0 950 968 A1 





CD 

Li_ 



342 



EP 0 950 968 A1 



CO 



lo <x> r^. oo cd o t~~" cvj 

CO CO CO CO CO CO CO CO 



CO 

CVJ coo 

CO O t— 

t- COO) 

r- CO CO 



cc 

Ui 
Q 

S5 



o 

LU 

cc 



o 

ac 

o 

CO 



Q 

ac 
< 
o 



o 

LU 

oc 



o 



cc 

LU 

CO 



CO 
LU 
ZD 

o 

LU 

en 



or 

LU 
CD 



o 

CO 



CO 
CJ> CO 



£ 

o 



CJ> 



o 
o 
o 
<*: 



o 
ac 

LU 



ZD 
CO 
CO 



o 



o 



cz> 
o 

CO 



o 

CO 



CO 



CO 




to 


CO 


o 


o 


o 


o 


CO 


CO 


co 


CO 
















7 



CO 



oo 


o> 


o 




O 


o 






CO 


CO 


CO 


CO 



















CM CO 

— ay 
co co o o 
t— co o> 

t- i- (O CD 



ggg&a jE^gaa^ SB&gcs%s agsrassg i^^sg aatgsaa gegaggsss n&aggggafi gsfiaroat sawr 



O 



or 

5 



CC 

o 

CO 



C3 



o 
cc 

LU 



CO 



ac 

UJ 

co 
z> 



LU 

8 

s 




343 



EP0 950 968 A1 



CO 

5- 



5 



CO 

5- 



GO 



o 

CM 



•y- CM 
CM CM 



CO 

3 



to 

CM CM CM 

«?f ^ o 

1— T— O 



o 

co 

UJ 

CC 

d 

o 

LU 

m 

o 
cc 
o 



GG 



—J UJ 
<C o 

UJ 

o ^ 

LU LU 

o z 

LU 

IS cc 



cc 

LU 

CO 



o 

CO 



CO 

„ o 

— I O- 
*=C CO 
Z LU 

O cc 

I— LU 

o ^ 

■ — ' CO 
CO 
LU 



CC 
LU 
CO 



CO 
LU 
ZD 

o 

LU 

CC 



O 
CC 

5 



Q 

o 
o 

z: 
o 

o 

ID 
GC 



o 
cr 
<* 
~c 
o 

UL- 

o 



LU 



CO 



O I 

o 
o 



S3 



a. 



s 



£2 
i 

CO 
ID 



^ Q 
\ UJ 

^ S: 

s >- 



CD 



O 

o 
o 
■< 



cc 

^ ac 

Be 



O 
O 



CO 

CO 



O 

UL 



O O 



CM 
CD 



CO 

o 



o 
«5f 



LO 
CD 



co r*- 
c=> o 



CO 

o 



a> o 

CD t— 



t- CM 
5 5 



CO 
LU 

ZD 

a 

LU 

CC 



3 

o 



o 

g 

o 



< 




CD 

LL. 



344 



EP 0 950 968 A1 




345 



EP 0 950 968 A1 



FIG.115C 



COMMUNICATION CHARGE 




COMMUNICATION CHARGE 
HEADER 


11524 


TRANSACTION NUMBER - 


11525 


REQUEST NUMBER 


11526 


CARD ID 


11527 


INSTRUCTION CODE 


11528 


AMOUNT OF CHARGE 


11529 


ACCOUNTING MACHINE ID - 


- 11530 


COMMUNICATION 
SERVICE PROVIDER ID 


11531 


ISSUED TIME 


- 11532 

- 7011 
7015 


£RPJ_ 



346 



EP 0 950 968 A1 



FIG.116A 



FIG.116B 



USAGE REPORT 



USAGE REPORT 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY A) 



i 



SECRET KEY A 



ENCRYPTED WITH TICKET ISSUER'S 
PUBLIC KEY (PUBLIC KEY Tl ) 



11600 




11606 
11607 



11608 
11609 

7100 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY B) 



i 



SECRET KEY B 



V, 



ENCRYPTED WITH PAYMENT CARD 
ISSUER'S PUBUC KEY (PUBLIC KEY PCI ) 



347 



EP 0 950 968 A1 



FIG.116C 



USAGE REPORT 



11620 




11628 
11629 



348 



EP 0 950 968 A1 



FIG.117A 



FIG.117B 



TICKET TRANSFER OFFER 



TICKET TRANSFER OFFER 
HEADER 



TRANSFER OFFER NUMBER- 



USER PUBLIC KEY 
CERTIFICATE HEADER 



USER PUBLIC KEY (USER A) 



PUBLIC KEY CERTIFICATE ID 



TERM OF VALIDITY 



SERVICE PROVIDER ID 
CERTIFICATE ISSUED TIME" 



11702 



11703 




11700 
11701 



11707 
11708 

11710 



11709 
7401 



TICKET TRANSFER OFFER RESPONSE 



TICKET TRANSFER OFFER 
RESPONSE HEADER 



ACCEPT NUMBER 



TRANSFER OFFER NUMBER 



TICKET ID 



ISSUED TIME 



USER PUBLIC KEY 
CERTIFICATE HEADER 



USER PUBLIC KEY (USER B) 



PUBLIC KEY CERTIFICATE ID! 



TERM OF VALIDITY 



SERVICE PROVIDER ID 4 



CERTIFICATE ISSUED TIME" 



-11716 
-11717 
-11718 
-11719 
-11720 

-11722 
■11723 

11724 

11725 
11726 



z®. — 11727 



-11721 
7404 



349 



EP 0 950 968 A1 



FIG.118A 



FIG.118B 



TICKET TRANSFER CERTIFICATE 



, aAjA^a^ a. A_A : /yy i a a AA/^ykA, 



TICKET TRANSFER 
CERTIFICATE HEADER 



PRESENTING TICKET 



TICKET STATUS 



VARIABLE INFORMATION 
OF TICKET 



TRANSFER OFFER NUMBER 



ACCEPT NUMBER 



PUBLIC KEY CERTIFICATE ID 
(USERB) 



PUBLIC KEY CERTIFICATE ID 
(USER A) 



TICKET ID 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY A) 



SECRET KEY A 



v vv/' ; ; s > > > J > > > > > ' 1 > 



ENCRYPTED WITH USER B'S 
PUBLIC KEY (PUBUC KEY UB) 




TICKET TRANSFER RECEIPT 



TICKET TRANSFER RECEIPT. 
HEADER 



TICKET ID 



TRANSFER OFFER NUMBER - 



ACCEPT NUMBER 



PUBLIC KEY CERTIFICATE ID 
(USER A) 



PUBLIC KEY CERTIFICATE ID 
(USER B) 




ENCRYPTED WITH A GENERATED 
SECRET K EY (SECRET KEY B) 



, , > J J J J > J J ■> J J J-T7-7 



SECRET KEY B 



ENCRYPTED WITH USER A'S 
PUBLIC KEY (PUBLIC KEY UA) 



11821 
11822 



11823 
11824 

7407 



350 



EP 0 950 968 A1 



FIG.119A 



FIG.119B 



TICKET TRANSFER REQUEST 




TICKET TRANSFER 



11900 



11901 



11902 

11903 

11904 
11905 



11906 
11907 

7411 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY D ] 



1 



SECRET KEY D 



i 



ENCRYPTED WITH USER ffS 
PUBLIC KEY (PUBLIC KEY UB ) 



351 



EP 0 950 968 A1 



FIG.120A 



FIG.120B 



CARD TRANSFER OFFER 



CARD TRANSFER OFFER RESPONSE 



CARD TRANSFER OFFER 
HEADER 



TRANSFER OFFER NUMBER ■ 



USER PUBUC KEY 
CERTIFICATE HEADER 



USER PUBLIC KEY (USER A) 



12003 




12000 
12001 



PUBLIC KEY CERTIFICATE ID 



TERM OF VALIDITY 



SERVICE PROVIDER ID 



CERTIFICATE ISSUED TIME 




12007 
12008 

— 12010 

— 12011 

— 12012 

— 12013 

— 12014 
12014 

— 12009 

7501 
7601 



CARD TRANSFER OFFER j 
RESPONSE HEADER 



ACCEPT NUMBER 



TRANSFER OFFER NUMBER 



CARD ID 



ISSUED TIME 



USER PUBLIC KEY 
CERTIFICATE HEADER 



USER PUBLIC KEY (USER B) 



PUBUC KEY CERTIFICATE ID 



TERM OF VALIDITY ~ffl — 



SERVICE PROVIDER ID - 



CERTIFICATE ISSUED TIME 




12026 
12027 

12021 

7504 
7604 



352 



EP 0 950 968 A1 



FIG.121A 



FIG.121B 



CARD TRANSFER CERTIFICATE 



I 



ENCRYPTED WITH A GENERATED 
SECRET KEY | 



(SECRET KEY A) 




SECRET KEY A 



1 



ENCRYPTED WITH USER B'S 
PUBLIC KEY (PUBLIC KEY UB ) 



CARD TRANSFER RECEIPT 



12109 

12110 

12111 
12112 



CARD TRANSFER RECEIPT 
HEADER 



CARD ID 



TRANSFER OFFER NUMBER 



ACCEPT NUMBER 



PUBLIC KEY CERTIFICATE 10 
(USER A) ' 



PUBLIC KEY CERTIFICATE ID 
(USER B) ' 



ISSUED TIME 



EH 



I 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY B ) 



SECRET KEY B 



<j ; ; * s > / s t i j j j. 



ENCRYPTED WITH USER AS 
PUBLIC KEY (PUBLIC KEY UA ) 




12123 
12124 

7507 
7607 



12113 
12114 

7506 
7606 



353 



EP 0 950 968 A1 

FIG.122A 



CARD TRANSFER REQUEST 




7511 



354 



EP0 950 968 A1 



FIG.122B 



FIG.122C 



PAYMENT CARD TRANSFER 



TELEPHONE CARD TRANSFER 



I 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY D ) 



SECRET KEY D 



s s s / t s <> s / / / / / s szi 



2 



ENCRYPTED WITH USER B*S 
PUBLIC KEY (PUBLIC KEY UB) 



12217 
12218 

7512 



l.y.y. y. y y y y y.y.y.y w v 




I 



ENCRYPTED WITH A GENERATED 
SECRET KEY (S ECRET KEY D ) 



; ; j ; s > ; ; j s j j j-r+ 



SECRET KEY D 



; s s / s j ; > j j ; s j 



ENCRYPTED WITH USER B'S 
PUBLIC KEY (PUBLIC KEY UB ) 



355 



EP 0 950 968 A1 



co 
cm 





CM 


CO 












CO 


CO 


CO 


CO 


CM 


CM 


CM 


CM 



LO 

CO 
CM 



co r<co 

CO COCO 
CM CMCM 



o> O 

«r- CM 

CO CO 

CM CM 




r— 



o 



CO 

2: 



3 
o 



cc 
co 



Q 

cc 

5 

o 

5 
2 

CO 



cc 

LU 

CO 



g 



cc 

Ui 

CO 



CO 
(JU 

O 

UJ 



or 
tu 

CD 



GC 
LU 

1 

3 



o 
cc 

LU 
Q 

S 

CC 

a. 

LU 

o 

LU 

CO 



s 

CO 
CO 



CD 
>- 
LU 

& 

GC 
O 
UJ 
CO 



CO 



>* 

LU 

o 



CO 

; lu 

i£ 

co 

: z> 
: Q- 



O 
CO 
CM 





CM 


CO 


o 

CO 


O 
CO 




CM 


CM 


CM 



o 

CO 
CM 



lo cor— 

CO COCO 
CM CMCM 



CO 


05 




O 




CO 


CM 


CM 








356 



EP 0 950 968 A1 



FIG.124A 



FIG.124B 



ELECTRONIC TICKET INSTALL COMMISSION 



ELECTRONIC TICKET INSTALL 




12422 
12423 

12424 

12425 
12426 



ENCRYPTED WITH USER'S 
PUBLIC KEY (PUBLIC KEY U) 



12427 
12428 



357 



EP 0 950 968 A1 




CO 
LU 

a 

UJ 
0C 

g 

I 

s 



Q. 
O 

o 
cc 

LU 
— I 
LU 



o 




o 




to 




CM 


CM 









CO 






o 


O 


LO 


LO 


LO 


CVJ 


CM 


CM 




T— 





S oo 

LO LO LO 
CM CM CM 




O 
GO 



; CO 



CC 
LU 
CD 



CC 
LU 
CD 



g 



CC 
LU 
CD 



CO 
LU 

ZD 

o 

LU 

CC 



CC 
LU 
CO 



CO 
CO 



x x A^XXXXX X x X XX XXX X XXX AX, 



358 



EP 0 950 968 A1 



FIG.126A 



FIG.126B 



ELECTRONIC PAYMENT CARD 
INSTALL COMMISSION 



ELECTRONIC PAYMENT CARD INSTALL 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY C) 



SECRET KEY C 



NCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP) 



12612 
12613 

7803 




I 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY D) 



SECRET KEY D 



'J J > / / > t j / / / / / * i-r-x 



5 



ENCRYPTED WITH USER'S 
PUBLIC KEY (PUBLIC KEY U) 



359 



EP 0 950 968 A1 





360 



EP 0 950 968 A1 



FIG.128A 



FIG.128B 



ELECTRONIC TELEPHONE CARD 
INSTALL COMMISSION 



ELECTRONIC TELEPHONE CARD INSTALL 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP) 




12812 
12813 

7903 



> s s ; * * s >j j j j j j j-x 



ENCRYPTED WITH USER'S 
PUBLIC KEY (PUBLIC KEY U ) 



361 



EP 0 950 968 A1 



FIG.129A 



MODIFICATION REQUEST 



MODIFICATION REQUEST 
HEADER 



MODIFICATION NUMBER 



MODIFICATION CODE 



TIME LIMIT OF MODIFICATION 



MODIFICATION MESSAGE 



□En 



TICKET CODE 



TEMPLATE CODE 



NUMBER OF TICKET 




TICKET ID 



TICKET INFORMATION 



TICKET ISSUER D 



REPRESENTATION COMPONENT ' 
(OPTIONAL) 



TICKET ISSUER ID 



ISSUED TIME 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY A]^ 



7r 

/ y SECRET KEY A 

V^. _ 



Z 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP) 



12900 
12901 
12902 
12903 

12904 

12905 
12906 
12907 

12916 
12917 

12918 
12919 



12908 
12909 

12910 

12911 

12912 
12913 



12914 
12915 



FIG.129B 



MODIFICATION NOTICE 




8000 
8100 
8200 
8300 



362 



EP 0 950 968 A1 



FIG.130A 



FIG.130B 



SELECT REACTION 



^xyyyxy-X.y.y^y.y.y. y.y.yy. 



SELECT REACTION HEADER 



MODIFICATION NUMBER 



REACTION CODE 




REQUEST NUMBER 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY C ) 



SECRET KEY C 



> > > > > / s j j j > > > f r-r 



ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBUC KEY SP) 



■13000 
-13001 

13002 

13003 

13004 

13005 

13006 

13007 
13008 



13009 
13010 

8104 
8204 
8304 



MODIFICATION INSTRUCTION 



MODIFICATION INSTRUCTION 
HEADER 



MODIFICATION NUMBER 



REQUEST NUMBER 



TICKET PROGRAM 



PRESENTING TICKET 



TICKET CERTIFICATE 



SERVICE PROVIDER ID 



ISSUED TIME 



ENCRYPTED WITH A GENERATED 
SECRET KEY (SECRET KEY D ! 



2 



SECRET KEY D 



7 



ENCRYPTED WITH USER'S 
PUBUC KEY (PUBLIC KEY U) 



363 



EP 0 950 968 A1 



t- cMco^mcor^cocn 
CO cocococococo coco 



o 

CM 

co 



^— CM 
CM CM 

CO CO 



CO <x> 
o o 

CM CO 
CO oo 



^^^^^ 
/ir or i "1 n i I f~i I 1 T 1 




CC 
LU 

o 

o 
8 



o 
o 

Q 



cc 



co 



o 

3 



o 

o 



o 
o 

cc 

Ul 

d 



o 



CO 



CO 
UJ 

o 



CO 
CO 

o 



3 

CO 



^XXaX aAAAXXaXAaaaX 



LU 

□c 
o 

LU 
CO 



O CO 

^ 

S3 

LU => 
CO ^ 

s — 

8 




364 



EP 0 950 968 A1 



FIG.132A 



FIG.132B 



TEMPORARY REFUND RECEIPT 



ft. * * VWyyy vvvvyvy_ 



• TEMPORARY REFUND RECEIPT 
HEADER 



1 



ENCRYPTED WITH A GENERATED 
SECRET KEY /SECRET KEY 6 ) 



SECRET KEY G 



.////////// * / * F 



ENCRYPTED WITH USER'S 
PUBLIC KEY (PUBLIC KEY U) 



REFUND CLEARING REQUEST 




t x.y.y.v * * y . y v v v ?m 



ENCRYPTED WITH TRANSACTION PRO- 
ICESSOR'S PUBLIC KEY (PUBLIC KEY TP ) 



365 



EP 0 950 968 A1 



FIG.133A 



FIG.133B 



REFUND CLEARING COMPLETION TP2SP 



REFUND CLEARING COMPLETION SP2TI 




ENCRYPTED WITH SERVICE PROVIDER'S 
PUBUCKEY(PUBUCKEVSP) 



13315 
13316 

8208 
8310 



366 



EP 0 950 968 A1 



FIG.134A 

REFUND RECEIPT TI2SP 



FIG.134B 

REFUND RECEIPT SP2U 




ENCRYPTED WITH USER'S 
PUBUC KEY (PUBLIC KEY U) 



367 



EP0 950 968 A1 




o 
o 
in 

CO 





CVJ 


CO 






o 


o 


o 




m 


m 


in 


CO 


CO 


CO 


CO 



to CO 

O O <3 LO 

S £ t2 2 

CO CO CO ^£ 

i— i— CO 



C3 



ac 

LU 



LU 

I 



8 

UJ 
O 

LU 
CO 

LU 

1 



o 
cc 
a. 

LU 

O 

LU 
CO 



CO 
ZD 



CO 
LU 

O 

UJ 

or 



a. 



O 



Q 
O 
O 



O 



o 
o 



LU 

LU 



CO 
CO 



368 



EP 0 950 968 A1 



ra- 
in 



in 
o 

oo 



co 
o 
xr 
<x> 



iO co 

^ rr 

in to 

co co 





oo 




•si- 


m 


lo 


CO 


CO 







O) O r- 

tf m in 
to to ir> 
co co co 



cm co 
to to 
wo to 

CO CO 



in 

CO 




$ $ 8 § 




2 



o 

CO 

cc 



CO 



CC 
LU 
CO 

S 
=> 



CO 

o 



8 

cc 
tu 
o_ 

LU 



co 



Q 

DC 

o 

cc 

Q- 
LU 

O 
>■ 
CC 
LU 
CO 



CO 
CO 




cm m 
o 



CO 

o 



t— CO 



m (on 

CM CM CM 

to to m 

CO CO CO 



cS $2 $2 $2 $2 



CO 
LU 
ZD 

o 

LU 

CC 



2 



tXJ 



CO 
LU 

Q 



LU 



LU 



>- 

2 



LU 
CO 



Q. 

CO 
LU 
CC 

CC 
LU 
Li_ 
LU 
O 

LU 

I 



CC 
LU 

CO 



O 

LU 

58 




co 



369 



EP 0 950 968 A1 



FIG.136A 



FIG.136B 



CLEARING REQUEST SP2TP 



CLEARING COMPLETION TP2SP 




13609 
13610 
13611 



13612 
13613 




ENCRYPTED WITH A GENERATED 
SEC RET KEY (SECRET KEY F) 



SECRET KEY F 



7 



-r > * > > /*/ / s / /■ > ? > t >Xt - — 5930 
ENCRYPTED WITH SERVICE PROVIDER'S 
PUBLIC KEY (PUBLIC KEY SP) 



13626 
13627 
13628 



• 5929 



8417 



370 



EP 0 950 968 A1 



FIG.136C 



CLEARING COMPLETION SP2M 



■J M *,y, y. X y w y w v y y y y y y yy 



CLEARING COMPLETION 
SP2M HEADER 




ENCRYPTED WITH A GENERATED 
SECRET KEY (SE CRET KEY G) 



3 



SECRET KEY G 



; s ; ) ; ; / j > ; ; j j , >^ 



ENCRYPTED WITH MERCHANT'S 
PUBLIC KEY (PUBLIC KEY M) 



-13631 

-13632 
-13623 

-13633 

13550 
13634 

13635 

13636 
13637 
13638 



13639 
13640 

8418 



371 



EP 0 950 968 A1 




(5 



372 



EP 0 950 968 A1 




373 



EP 0 950 968 A1 



85 

co 

CO 



o 



UJ 








to 




>- 




CO 




cc 




LU 








LU 




o 





CO 

CO 
CO 



CO 
CO 




CD 
00 
CO 



374 



EP 0 950 968 A1 




375 



EP 0 950 968 A1 




376 



EP 0 950 968 A1 



FIG.141A 



FIG.141B 



301 



300 302 




309 



310 14100 



312 



T7 




301 
300 



_14101 



4 



14100 



FIG.141C 



FIG.141D 




ICCARD 



Taro Suzuki 



14102 



Taro Suzuki 

11112222333)4444 
CndtCMCopenun 



(DO (3© 




CCARD 
Taro Suzuki 



14102 



14200 



377 



EP 0 950 968 A1 




378 



EP 0 950 968 A1 




379 



EP 0 950 968 A1 



FIG.144 



SECURITY AREA 14400 



FUNDAMENTAL PROGRAM 
OBJECTS AREA 14401 



SERVICE DATA AREA 14402 



USER AREA 14403 



TEMPORARY AREA 14404 



v 

FeRAM 14303 



380 



EP 0 950 968 A1 



INTERNATIONAL SEARCH REPORT 



International application No. 

PCT/JP98/03608 



A CLASSIFICATION OF SUBJECT MATTER 

Int. CI 6 G06F17/60 

According to Int ernational Patent Classification (IPQ or to both national classific ation and IPC 
B. FIELDS SEARCHED " ~ " " 



Minimum documentation searched (classification system followed by classification symbols* 

Int - C1 sss^ ho4b7/26 - ™*™«>° // ww*. 



Kokai Jxtsuyo Shiran Kbho 1971-1998 Jitsuyo Shii^ Otaroku Koho 1996-1998 



Eectronicdata base consulted during the international search (name of data base and, where practicable, search terms used) 



C DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with indication, where appropriate, of the relevant passages 



GOLDSTEIN, Theodore: "The Gateway Security Model in 
the Java Electronic Commerce Framework" in LNCS 
Ir 1 ^] 3 < Pina ? ciaI Cryptography? Proceedings of 
FC 97), June 1997 (06. 97), Springer-Verlag 
(Berlxn, Germany), pp340-354. 



QD Furtto documents are listed in the continuation of Box C Q See patent family annex. 



Relevant to claim No. 



1-4, 27-48, 
55-64, 69-74, 
93, 97-99, 
102, 107, 
111-114, 117, 

118, 122, 
126-128, 131, 
133-144, 
146-154, 
156-161, 
163-168, 
172, 173, 
178-195 



"P" 



Spedal categories of «wi A^ tmrrt ^- 

document defining the general state of the art which is oot 

ctwidered to be of particular relevance 

eaftter document bat published on or after the intermtiooal filing date 
document which may throw doubts oa priority daia*i) or which is 
aled to establish Ihepubtkatioa date of another citation or other 
special reason (as specified) 

doewneat referring toaaoraJ disclosure, use, exhibition or other 



draneot pabUshed prior to the international filing date but later than 
the pnoniy date claimed 



*^ document published after the international filing dale or priority 

dale and not in conflict with the applicatioa but cited to uodcrataad 

the principle or theory anderlying the invention 
*X- document of particular relevance; the claimed iovcatioa cannot be 

considered novel or cannot be considered to iavetvc an iaventive atnp 

when the document is takm alone 
"V document of particular relevance; the claimed inveation cannot be 

conadered to involve an inventive atcp when the document is 

combined with oae or more other such dc<ument3, sncfa combination 

being obvious to a person skilled in the art 
*&" document member of the same patent family 



Date of the actual completion of the international search 
10 November, 1998 (10. 11. 98) 



Date of mailing of the internalionaJ search report 

1 December, 1998 (01. 12. 98) 



Name and mailing address of the ISA/ 

Japanese Patent Office 

Facsimile No. 



Authorized officer 



Telephone No. 



Form PCT/ISA/210 (second sheet) (July 1992) 



381 



EP 0 950 968 A1 



INTERNATIONAL SEARCH REPORT 



International application No. 

PCT/JP98/03608 



C (Continuation). DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



SUN MICROSYSTEMS INCORPORATED: "Writing Code for the 
JECF M in Java Electronic Commerce Framework , alpha 
0.6, May 1997 (05- 97). 



ANONYMOUS: "MasterCard Launches First 
Multiapplication Smart Card Platform" in Report on 
Smart Cards, vol 11 issue 10, May 26, 1997 
(26. 05. 97) 



JP, 6-121075, A (Nippon Telegraph & Telephone 
Corp.)/ 

28 April, 1994 (28. 04. 94) (Family: none) 



JP, 8-279025, A (Motorola, Inc.), 
22 October, 1996 (22. 10. 96) 
& GB, 2298613, A & DE, 19607509, Al 
& FR, 2732136, Al fit CA, 2169326, A 



1-4, 27-48, 
55-64, 69-74, 
93, 97-99, 
102, 107, 
111-114, 117, 

118, 122, 
126-128, 131, 
133-144, 
146-154, 
156-161, 
163-168, 
172, 173, 
178-195 

1-4, 27-48, 
55-64, 69-74, 
93, 97-99, 
102, 107, 
111-114, 117, 

118, 122, 
126-128, 131, 
133-144, 
146-154, 
156-161, 
163-168, 
172, 173, 
178-195 

1-4, 27-48, 
55-64, 69-74, 
93, 97-99, 
102, 107, 
111-114, 117, 

118, 122, 
126-128, 131, 
133-144, 
146-154, 
156-161, 
163-168, 
172, 173, 
178-195 

1-4, 27-48, 
55-64, 69-74 
93, 97-99, 
102, 107, 
111-114, 117 

118, 122, 
126-128, 131 
133-144, 
146-154, 
156-161, 
163-168, 
172, 173, 
178-195 



Form PCT/ISA^IO (continuation of second sheet) (July 1992) 



382 



EP 0 950 968 A1 



INTERNATIONAL SEARCH REPORT 



International application No. 

PCT/JP98/0360B 



C (Continuation). DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



WO, 96/25828, AX (Nokia Mobile Phones Ltd), 

9 February, 1996 (09. 02. 96) 

& FI, 9500685, A & FI, 99071, B 

& AU, 9646247, A & EP, 809916, Al 



ANONYMOUS : "Smart Card — Schlutnberger Announces 
First-Ever Java-Based Smart Card" in EDGE — Work- 
Group Computing Report, Vol 7, No 338, Nov 4 1996 
(04, 11. 96), page 9. 



JP, 8-101875, A (Transaction Technology Inc.)r 

16 April, 1996 (16. 04. 96) 

& EP, 662665, A2 & AU, 9481732, A 

& CA, 2140052, A & BR, 9500025, A 

& ZA, 9500058, A & CN, 1121295, A 



O 'MAHONY et al: Eletronic Payment Systems June 1997 
(07. 97), Artech House (Boston, USA) pp 191-220, 



1-4, 27-48, 
55-64, 69-74, 
93, 97-99, 
102, 107, 
111-114, 117, 

118, 122, 
126-128, 131, 
133-144, 
146-154, 
156-161, 
163-168, 
172, 173, 
178-195 

1-4, 27-48, 
55-64, 69-74, 
93, 97-99, 
102, 107, 
111-114, 117, 

118, 122, 
126-128, 131, 
133-144, 
146-154, 
156-161, 
163-168, 
172, 173, 
178-195 

1-4, 27-48, 
55-64, 69-74, 
93, 97-99, 
102, 107, 
111-114, 117, 

118, 122, 
126-128, 131, 
133-144, 
146-154, 
156-161, 
163-168, 
172, 173, 
178-195 

1-4, 27-48, 
55-64, 69-74, 
93, 97-99, 
102, 107, 
111-114, 117, 

118, 122, 
126-128, 131, 
133-144, 
146-154, 
156-161, 
163-168, 
172, 173, 
178-195 



Form PCT/ISA/210 (continuation of second sheet) (July 1992) 



383 



EP0 950 968 A1 



INTERNATIONAL SEARCH REPORT 



International application No. 

PCT/JP98/03608 



C (Continuation). DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



WO, 96/02890, Al (NTT Data Communications Systems 
Corp) , 

I February, 1996 (01. 02- 96) 

k EP, 720102, Al, A4 & CN, 1130434, A 
& JP, 8-30702, A & JP, 8-190598, A 
& JP, 8-202774, A 

JP, 8-15 3248, A (Sanyo Electric Co-, Ltd.), 

II June, 1996 (11. 06- 96) (Family: none) 

ANONYMOUS: "Prance Telecom Mobiles Offers Mobicaxte 
Pre-paid Phone Card to Avoid Bad Debt Problems" 
in Computergram International , No 3125, March 21 1997 
(21. 03. 97) 

ANONYMOUS s "Ferroelectric Smart Cards Go to Market." 
in Report on Smart Cards, Vol. 10, Issue 19, 
September 23 1996 (23. 09. 96). 



3, 40, 41, 44, 
48 



27, 31, 165 



S3, 64, 
111-114, 
142-144 



140, 141 



Form PCT/TSA/210 (continuation of second sheet) (July 1992) 



384 



